Stand-Alone External Network Access Guide

After completing the intranet deployment, you can enable external network access by configuring one of two modes: **Direct Connection Mode** or **Proxy Mode**. [Understand the difference between direct connection mode and proxy mode](https://www.pingxingyun.com/contribute/detail?topicId=10105&categoryId=3)

## Direct Connection Mode

In the stand-alone version, the master node and rendering node are on the same machine, so the system defaults to **direct connection mode**. If the server has a public (external) IP, external access can be achieved by opening the required ports or configuring router port mapping.

> **Note:** For HTTPS access, it is recommended to use Proxy Mode instead. In direct connection mode, the rendering node must be configured with an SSL certificate to support the WSS protocol.

### Configuration Steps

1. Double-click `LarkXRLauncher.exe` and open **Configure Rendering Node**.
2. Set **Local IP** to the server's internal IPv4 address.
3. Set **Public IP** to the server's external IP address.
4. Set **Preferred Public IP** to the external IP address (e.g., `112.6.266.122`).

![Render node configuration - direct connection mode](https://docs.paraverse.cc/media/202504/68fe2856d01c4128aa8db7cd28b013595213.png)

### Required Ports

| Protocol | Port | Requirement | Purpose |
|---|---|---|---|
| TCP | 8181 | **Required** | Frontend page (nginx) and backend interface |
| TCP | 8182 | Not required | Backend page nginx forwarding |
| TCP | 10002 | **Required** | WebSocket communication |
| UDP | 10011-10040 | **Required** | Audio and video streaming (one port per concurrency) |

## Proxy Mode

In Proxy Mode, external clients connect through the management node as a relay. This eliminates the need to open port `10002` on the rendering server and is the recommended approach for HTTPS/WSS setups.

### Configuration Steps

1. Double-click `LarkXRLauncher.exe` and open **Configure Management Node**. Enable the **Render WsConn Proxy** toggle.

![Admin node configuration - enable proxy mode](https://docs.paraverse.cc/media/202504/96fdf77d8ef64fe3bd905ee35f3d1c9b3135.png)

2. Open **Configure Rendering Node**.
3. Set **Local IP** to the server's internal IPv4 address.
4. Set **Preferred Public IP** to the server's external IP address (e.g., `112.6.266.121`).

![Render node configuration - proxy mode](https://docs.paraverse.cc/media/202504/bf6b947e5c874251944ee940b7aa936e9742.png)

### Required Ports

| Protocol | Port | Requirement | Purpose |
|---|---|---|---|
| TCP | 8181 | **Required** | Frontend page (nginx) and backend interface |
| TCP | 8182 | Not required | Backend page nginx forwarding |
| UDP | 10011-10040 | **Required** | Audio and video streaming (one port per concurrency) |