Skip to content

Preparing and Adding a Node

Use this procedure to create a Node in MyOwnProxy, prepare its microSD card, and allow it to enroll automatically.

Required role

You must be an ADMIN. A VIEWER can review Nodes but cannot create one.

Before you begin

Have the following ready:

  • A Raspberry Pi 4 Model B or Raspberry Pi 5 with at least 2 GB of RAM.
  • A 32 GB or larger High Endurance microSD card.
  • The official power supply appropriate for the Raspberry Pi model.
  • An Ethernet cable and stable Internet connectivity at the Node location.
  • The Node image supplied by MyOwnProxy.
  • A computer and an SD-card imaging tool for writing the image to the card.
  • An ACTIVE, healthy Gateway for the same Customer.

A passive case with good heat dissipation is recommended. A Flirc-style case is a suitable fanless option.

See System Requirements for the complete requirements.

Create the Node

  1. Open Nodes in MyOwnProxy and select Create Node.
  2. Enter a descriptive name and region.
  3. Select the ACTIVE Gateway that the Node should use.
  4. Select Create Node.
  5. Securely copy the complete installation configuration shown for that Node.

The generated configuration is one-time provisioning material for this Node's first enrollment. Keep it private, do not use it for another Node, and do not include it in logs, tickets, or documentation.

While the Node remains in PENDING_ENROLLMENT, this provisioning material does not expire merely because time passes. You can store, transport, or ship the physical Node or prepared microSD card and first start it days, weeks, or months later. Protect the provisioning material throughout that period.

The complete generated configuration is presented as part of the creation workflow. If you leave that workflow without retaining it, or if you are unsure that you have the complete values, do not reconstruct values from examples. Contact MyOwnProxy Support for the supported recovery path.

Prepare the microSD card

  1. Use the approved imaging tool to flash the supplied Node image to the microSD card.
  2. When flashing is complete, open the card's customer-editable BOOT partition on your computer.
  3. Review README-IT.txt in the BOOT partition for the installation reminder included with the image.
  4. Create a plain-text file named prpn.conf in the root of the BOOT partition. On the running Node, this file is available as /boot/firmware/prpn.conf.
  5. Paste the complete installation configuration supplied for this Node into prpn.conf unchanged.
  6. Save the file and safely eject the microSD card.

The image also includes prpn.conf.example. This file is a structural reference only; do not copy it and reconstruct production provisioning values from it. The complete configuration shown by MyOwnProxy when you create the Node is authoritative.

Do not shorten, extend, or recreate the generated configuration. The prpn.conf file contains sensitive values. Keep it on the card and do not modify or delete it unless MyOwnProxy Support instructs you to do so.

Protect provisioning before first enrollment

Treat the provisioning material, prepared microSD card, and physical Node as sensitive until the Node completes its first enrollment.

If the physical Node or prepared media is lost or stolen, the provisioning material may have been exposed, or compromise is suspected:

  1. Permanently remove the affected Node in MyOwnProxy.
  2. If a Node is still needed, create a new Node and prepare it with the new Node's provisioning material.

Do not wait for pending Node provisioning to expire. Elapsed time alone does not make the provisioning material unusable while the Node remains in PENDING_ENROLLMENT.

Connect and start the Node

  1. Insert the prepared microSD card into the Raspberry Pi.
  2. Connect the Raspberry Pi to its network by Ethernet.
  3. Connect the official power supply.
  4. Allow the Node to start and complete setup.

The Node reads prpn.conf, completes its MyOwnProxy setup, and enrolls automatically. If Internet connectivity is temporarily unavailable, setup retries automatically.

The first successful enrollment consumes the provisioning material. It cannot be reused to enroll the Node again or to enroll another Node.

Normal onboarding does not require SSH access or manual commands on the Node.

Verify enrollment

In MyOwnProxy:

  1. Open the new Node.
  2. Wait for it to progress from PENDING_ENROLLMENT or ENROLLED to ACTIVE.
  3. Confirm that it shows the intended Gateway and a recent heartbeat.
  4. Review its health information and reported public IP.
  5. Configure the Node's required Pool membership through Proxies.
  6. Test the affected Pool-based Proxy and confirm the expected exit IP.

Gateway assignment automatically places the Node in that Gateway's system-managed pool-all. Membership in customer-created Pools is separate and must be configured manually. See Proxies and Using the Proxy.

If enrollment does not complete

If the Node remains in PENDING_ENROLLMENT or does not begin reporting:

  1. Confirm that prpn.conf is a plain-text file with the exact filename and contains the complete configuration for this Node.
  2. Confirm that the microSD card contains the supplied Node image.
  3. Check the official power supply, Ethernet connection, and local Internet service.
  4. Allow automatic setup to retry after a temporary network interruption.
  5. Use Troubleshooting or contact MyOwnProxy Support if enrollment still does not complete.

Do not try to repair onboarding with SSH or unprovided manual commands.