This is a way to externally check on the state of the UTAT internal network. It’s basically an external API that allows for pinging resources in the UTAT network so that Uptime Kuma can check on how things are going.
The only modules that are enabled are http_2xx, icmp_ipv4, and tcp_connect as to reduce the threat of network intrusion.
The blackbox is further protected by a restricted set of NGINX proxy rules, only allowing local devices and Uptime Kuma’s IP to connect to it. There’s also basic HTTP authentication for good measure, though it’s not like that actually helps with security too much.
Ex. TCP port: Check https://blackbox.utat.space/probe?target=altiumdb.in.utat.space:3306&module=tcp_connect
for the phrase probe_success 1
.
Ex. Web service: Check if https://blackbox.utat.space/probe?target=confluence.in.utat.space/confluence&module=http_2xx
returns a 200 code
Ex. machine: Check https://blackbox.utat.space/probe?target=10.0.1.161&module=icmp_ipv4
for the phrase probe_success 1
.
For debugging, it may help to adjust the NGINX proxy to allow wherever you’re debugging for: the blackbox FQDN resolves externally, so simply being on the VPN won’t help.