TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Integrating with External Systems Without Ngrok: What Are My Options?

3 点作者 jeeybee5 个月前
Hi Hacker News,<p>I&#x27;m working on integration projects that require communication between our internal systems and external platforms. I’ve been using <i>ngrok</i> to expose local servers, but my organization’s IT security team has denied its usage with the reason:<p>&gt; &quot;We will not allow any kind of services that will allow external traffic to hit local machines.&quot;<p>Without ngrok, the integration process has become time-consuming and error-prone due to the guesswork needed to understand external systems.<p>Current Development Cycle:<p>Currently, I point the webhooks to a site like webhook.site and manually copy the payload from there. While this works, it&#x27;s extremely inefficient and increases the potential for errors during integration.<p>Potential Workaround:<p>I&#x27;m considering using a Docker container running in the cloud that allows me to <i>live change the code</i> as needed. This setup would operate behind our IT security measures, potentially bypassing the restrictions on direct external traffic to local machines.<p>What I&#x27;m Looking For:<p>- Alternative Tools: Secure alternatives to ngrok for exposing local or cloud-based services.<p>- Cloud-Based Solutions: Insights on using Docker containers in the cloud for integrations, including best practices for live code updates.<p>- Best Practices: Strategies for integrating with external systems in highly secure environments.<p>- Community Insights: How others have navigated similar restrictions and any successful solutions they&#x27;ve implemented.<p>Any recommendations, experiences, or advice on this approach would be greatly appreciated!<p>Thanks!

3 条评论

solardev5 个月前
I feel like this isn&#x27;t really a software question about ngrok vs Docker vs any other proxy &#x2F; network app, but a question of your business&#x27;s underlying network architecture decisions made by the business. Presumably some things are on the LAN and not online on purpose...? Or are these just a bunch of legacy systems that just haven&#x27;t made it online yet?<p>In other words, is IT just concerned about you opening up your LAN to external incoming traffic, or is there some underlying data security concern too?<p>If it&#x27;s just that IT doesn&#x27;t want you to be running servers, can you make the webhooks point the other way instead (outgoing from your LAN to the public internet, not the other way around). If you can&#x27;t do that, you can still write messages to an external queue and have your LAN poll it every few seconds, maybe? Or if your IT allows this (doubtful but maybe worth asking) you can maybe establish a long-lived tunnel via SSH or a Cloudflare Tunnel, etc., that establishes a single connection to a single outside server (which then receives all the public traffic). That is somewhat safer than opening up a port to public traffic directly.<p>But when you say &quot;highly secure&quot;, that makes me wonder if some of this data was never meant to leave the LAN (like are there compliance &amp; privacy issues to consider?). You might want to double-check that with them before making any sort of public-interfacing integration, because you&#x27;d be risking a lot more than a complaint from IT if you inadvertently exposed all this private stuff to the internet.<p>Otherwise, for webhook testing, can&#x27;t you just point the payload at some local proxy or recipient? Postman&#x27;s is pretty easy to use: <a href="https:&#x2F;&#x2F;learning.postman.com&#x2F;docs&#x2F;sending-requests&#x2F;capturing-request-data&#x2F;capture-with-proxy&#x2F;" rel="nofollow">https:&#x2F;&#x2F;learning.postman.com&#x2F;docs&#x2F;sending-requests&#x2F;capturing...</a> and there are others. You don&#x27;t actually have to send the webhook outside the LAN just for development.
评论 #42393048 未加载
ghoshbishakh5 个月前
I don&#x27;t think anything is more secure as such than ngrok. You can use TLS tunnels to end-to-end encrypt the requests. But I do not think your organization&#x27;s IT will allow that either. You can still check out <a href="https:&#x2F;&#x2F;pinggy.io" rel="nofollow">https:&#x2F;&#x2F;pinggy.io</a> for that.<p>My suggestion is to host it in cloud and do your development there.
评论 #42392995 未加载
srichard165 个月前
Would the internal endpoints solve this for you? <a href="https:&#x2F;&#x2F;ngrok.com&#x2F;docs&#x2F;network-edge&#x2F;internal-endpoints&#x2F;" rel="nofollow">https:&#x2F;&#x2F;ngrok.com&#x2F;docs&#x2F;network-edge&#x2F;internal-endpoints&#x2F;</a><p>Happy to help with a solution. Sam at ngrok.com is my email
评论 #42392955 未加载