Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am demoing a product that will soon be sold, but during demos I have found that peoples internet is often more restrictive than I ever thought. In one particular area the internet provider does not allow the customer to access the router and open ports (this seems to be when the customer has cable through internet). This has got me thinking about how I am going to update and service the product, I originally assumed that I would be able to setup static IPs and port forwarding but this is not going to work. I also have found that many more people than I expected are on dynamic IPs. How do I overcome these problems?

I am running a very minimulistic linux with no gui, or X.

share|improve this question
up vote 1 down vote accepted

Have the product initiate the request? Generally almost any connection can initiate outgoing requests, and it eliminates port forwarding issues. Maybe do it on a schedule?

share|improve this answer
This is where things get confusing for me. I am not even sure what to look up to understand this better. I can imagine having it connect to a server from 22 and now I connect to the server to initiate my connection. I just have no clue where to look. – mrhobbeys Feb 27 '13 at 7:15
Look into reverse ssh… – ssmy Feb 28 '13 at 16:08

Run an openvpn client on your product that connects back to an openvpn server at your site. Then you can ssh to the product device through the vpn.

share|improve this answer
Any recomended solutions? I have a server running on static IP that runs FreeBSD and another with Ubuntu. – mrhobbeys Feb 28 '13 at 6:11
Of the solutions I have found so far PPTP, IPsec, and OpenVPN. It seems that OpenVPN is the most secure, but I also found that OpenVPN might have these (unconfirmed by me) issues that are a problem for me at this point. Limited Scalibility, if a key is stolen then all previous sessions become known(?), the key is stored on each peer in plain text. Need the ability to have lots of peers if the product is successful. Storing the key in plan text just seems like it asking from problems. I can not think how much of a problem it would be if the sessions are known but it sounds bad. – mrhobbeys Feb 28 '13 at 6:36

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .