Nginx Reverse Proxy: Exposing LarkXR Cluster to External Network

## Overview

This guide covers using Nginx as a reverse proxy to expose a LarkXR cluster to the external network. It applies to scenarios where the rendering servers are not directly accessible from the internet but are reachable within the same LAN.

**Use Case:**
- Rendering servers are on a private LAN (e.g., 192.168.0.229, .230, .231)
- Central Dispatch Server is at 192.168.0.171
- An Nginx server bridges the LAN (192.168.1.172) and the internet (192.168.20.19)
- External clients access the system through Nginx

> **Note:** The Nginx server must run on Linux to support UDP port reverse proxy.

## Prerequisites

Deploy the cluster using the intranet cluster deployment method. Refer to [Cluster Intranet](https://docs.paraverse.cc/doc/247/) and make sure to enable **websocket proxy**. Once intranet deployment is complete, install Nginx on the server that bridges the external network and the LAN.

## Configuration Steps

### Step 1: Configure Nginx for TCP and UDP Reverse Proxy

**1. Add a reverse proxy for port 8181 (TCP)**

Download [out.conf](https://pxy-showdoc.oss-cn-beijing.aliyuncs.com/out.conf) and place it in the `nginx/conf/conf.d` directory.

> Edit line 2 of `out.conf` to set the actual IP address of the central management node.

**2. Add reverse proxies for UDP ports**

Download [udp.conf](https://pxy-showdoc.oss-cn-beijing.aliyuncs.com/udp.conf) and place it in the `nginx/conf` directory.

The UDP port numbers in `udp.conf` must match the UDP port range configured in the rendering node's startup manager, one-to-one. For example, if the rendering service manager uses ports `10011-10020`, configure 10 UDP reverse proxy entries.

**3. Update the main Nginx configuration**

Edit `nginx/conf/nginx.conf` and add an include directive to load the UDP configuration file.

### Step 2: Open Firewall Ports and Verify

On the Nginx server, open:
- **Port 8033** (TCP) - Main application access port
- **UDP port range** matching the rendering nodes

**Verify the setup** by accessing the Nginx server's external IP on port 8033:

```
http://222.12.20.19:8033
```

You should see the application overview and be able to launch rendering sessions.

> The port `8033` is configurable on line 7 of `out.conf`.