【本文面向全球访客，故以英语撰写，请国内访客见谅】

As China ISP blocks http port(80), my vSphere client often reconnects due to connection timeout. Modifying VpxClient.exe.config won’t solve this issue, so if there could be a DNAT locally on windows 7, it may solve my problem!

It’s very easy to set up DNAT on linux with iptables, but how to achieve this on Windows 7?

Here I use netsh interface portproxy utility to complete this.

netsh interface portproxy add v4tov4 listenaddress=0.0.0.0 listenport=80 connectaddress=ESXI.HOST.NAME connectport=8090
netsh interface portproxy add v4tov4 listenaddress=0.0.0.0 listenport=443 connectaddress=ESXI.HOST.NAME connectport=4433
netsh interface portproxy add v4tov4 listenaddress=0.0.0.0 listenport=902 connectaddress=ESXI.HOST.NAME connectport=902 

In this way, we can avoid attacks because we can modify the default 443 to some port else.

Log on

The only difference is: just replace the IP with 127.0.0.1.

It’s the connection states. Well… my real server is somewhere else on the Internet and its host name is ESXI.HOST.NAME defined in the codes above.

GUI tool: PassPort

I find a GUI tool that does the same work and even better! That’s PassPort, which also supports UDP port proxy.
Please visit its website for more information: http://sourceforge.net/projects/pjs-passport