Connection Principles

Problems with Traditional VPS

When using traditional VPS, you typically need to:

Open ports — Firewall settings to allow external inbound connections (22 for SSH, 80/443 for HTTP)
Fixed IP or domain — To know where to connect
Handle DDoS protection — Public services are vulnerable to attacks
Manage SSL certificates — HTTPS requires regular certificate renewal

This is too high a technical barrier for business owners.

RealVco’s Solution: Cloudflare Tunnel

RealVco uses Cloudflare Tunnel (formerly Argo Tunnel) to solve these problems.

How It Works

        You (Browser/Phone)
              │
              ▼ HTTPS
    ┌─────────────────────┐
    │   Cloudflare CDN    │ ◄── SSL termination, DDoS protection
    │   (Global nodes)    │
    └─────────────────────┘
              │
              ▼ Encrypted tunnel
    ┌─────────────────────┐
    │  Cloudflare Tunnel  │
    │   (cloudflared)     │
    └─────────────────────┘
              │
              ▼ Outbound only
        ┌─────────────┐
        │ Your VPS    │ ◄── No inbound ports needed
        │ (mVPS)      │
        └─────────────┘

Key Features

Feature	Description	Benefit
Outbound-only	VPS actively connects out to Cloudflare	Firewall doesn’t need any inbound ports open
Encrypted tunnel	All traffic goes through encrypted tunnel	Cannot be eavesdropped or tampered with
CDN acceleration	300+ global nodes	Fast connections, wherever you are
DDoS protection	Built-in Cloudflare protection	Protect your services from attacks
Auto SSL	Cloudflare manages certificates	No manual HTTPS setup needed

What This Means for You

✅ Security Improvements

No public ports: Your VPS has no public inbound ports open
Hidden real IP: External parties only see Cloudflare’s IP, not your VPS IP
Automatic protection: DDoS attacks are absorbed by Cloudflare, not affecting your service

✅ Convenience Improvements

No domain setup needed: RealVco provides *.realvco.com subdomains
Automatic HTTPS: SSL certificates auto-renew, no expiration worries
Global acceleration: Fast connections whether you’re in Taiwan, US, or Europe

✅ Simplified Management

No firewall setup: No need to configure iptables or UFW
No port forwarding: No router or NAT configuration needed
No certificate management: No Let’s Encrypt or SSL setup required

Technical Architecture

Inside Your mVPS

┌─────────────────────────────────────┐
│           Your mVPS                  │
│  ┌─────────────────────────────┐   │
│  │  Cloudflare Tunnel Agent    │   │ ◄── Establishes outbound connection
│  │      (cloudflared)          │   │
│  └─────────────────────────────┘   │
│              │                      │
│  ┌───────────┼───────────┐         │
│  ▼           ▼           ▼         │
│ ┌────┐    ┌────┐    ┌────┐        │
│ │Rose│    │Ada │    │Vi  │        │ ◄── 3 AI partners
│ │:80 │    │:80 │    │:80 │        │
│ └────┘    └────┘    └────┘        │
│   │         │         │            │
│  ┌┴─────────┴─────────┴┐          │
│  │   OpenClaw Gateway  │          │
│  │    (Port 8080)      │          │
│  └─────────────────────┘          │
│            │                       │
│  ┌─────────┴──────────┐           │
│  ▼                    ▼           │
│ ┌────────┐       ┌────────┐       │
│ │Admin   │       │Public  │       │
│ │Panel   │       │Pages   │       │
│ └────────┘       └────────┘       │
└─────────────────────────────────────┘

Access URL Mapping

Service	Internal Port	Public URL
Admin Panel	8080	`https://xxx-00.realvco.com`
Rose	18100	`https://xxx-1.realvco.com`
Ada	18200	`https://xxx-2.realvco.com`
Vi	18300	`https://xxx-3.realvco.com`

All URLs go through Cloudflare CDN for acceleration and protection.

Limitations and Considerations

⚠️ Dependency on Cloudflare

If Cloudflare service is interrupted, connections will be affected
But your VPS local services continue running normally
Can connect directly via SSH (if configured) for maintenance

⚠️ Bandwidth Limitations

Cloudflare Tunnel has no limit on HTTP traffic
But large file transfers may be slower (through CDN)
For large file transfers, use SFTP/SCP to connect directly to VPS

⚠️ Geographic Limitations

RealVco service is available globally
But some countries/regions may not access Cloudflare (very few)