Frequently Asked Questions
Trial
Trial length
The free trial lasts one week. You provide the servers and deployment access; NetGuard deploys the nodes and binds them to your trial instance, where you configure forwarding rules. See Free Trial for the complete terms.
Trial regions
Trials are available only on networks outside mainland China. Clients, nodes, and origins must all be located outside mainland China, and trial data cannot cross its boundary. See Regional Eligibility.
Get the files
The client SDK, administration console, and real IP plugin are described in the relevant integration, configuration, and real-IP sections of the Developer Guide. NetGuard provides the AppId, configuration endpoint, version, and checksum when the project is activated.
Product
NetGuard overview
NetGuard is a privately deployed DDoS protection and forwarding system for integrated apps. Distributed gateways absorb attacks, Shield servers conceal origins, and seamless reconnection keeps apps online when nodes fail.
Protection cap?
NetGuard has no fixed expansion ceiling. Add gateways, protected nodes, and networks to grow the overall defense capacity with the attack profile and user distribution.
In-app web?
Yes. Any app with the SDK integrated can forward TCP or UDP traffic, plus in-app pages and HTTP APIs, through the same protection architecture.
Hide the origin
Clients connect only to dynamic gateways, while the origin accepts traffic only from approved Shield servers. See Origin Protection and the Release Checklist.
Integration
Client or server?
Integrate the NetGuard SDK into the Windows, Android, or iOS client app, not the server app. Install the real IP plugin at the origin only when the app needs the client's real IP.
Supported OS
The minimum versions are Windows 7, Android 4.4 (API 19), and iOS 12. Confirm the delivered version in the Developer Guide and project notes.
Local connection?
The SDK receives app traffic locally, selects a gateway, and forwards it. Android and iOS use 127.0.0.1; each Windows app uses its own NetGuard instance and the local address assigned to that instance.
Ports below 1024?
Due to OS limitations, NetGuard does not support forwarding to ports below 1024 (0–1023).
Multiple processes?
Use a separate SDK process for multi-process apps or when direct loading could cause crashes or connection failures.
Init failed?
Common causes include an invalid AppId, an unreachable configuration service, missing forwarding rules, or failure to open the local address. Check the returned code and provide the platform, SDK version, time of occurrence, and reproduction steps.
Client IP?
Supported private environments can install the real IP plugin. Operating systems, versions, and deployment steps are confirmed with each project.
Private Deployment
What's included?
It includes dedicated gateways, Shield servers, configuration services, an administration console, and agreed deployment and operational support. See What Is Deployed.
Cross-border data?
Yes, but private deployment is required to carry cross-border production traffic. See Cross-Border Deployment.
Apply
Read Free Trial, confirm the regional and server requirements, then send your client platforms, traffic types, user regions, and expected connections to Online Support.