TechStunnel

From Redrock Wiki

    The legacy Trac 4.0 version of TutorTrac/AdvisorTrac/FitnessTrac is no longer receiving updates and will be end-of-life in 2025. All Trac 4.0 customers are encouraged to migrate to TracCloud. TracCloud has been designed from the ground up for speed, power, and security. Click here to schedule a TracCloud demo or reach out to sales@go-redrock.com for migration pricing or contract details. For more details about the migration process, click here.



TracCloud
For over two decades, Redrock’s TutorTrac has been a trusted solution used by thousands of centers worldwide. Now, we have completely redesigned TutorTrac using the latest, most sophisticated development tools to bring you TracCloud. Rebuilt from the ground up, TracCloud has been rigorously tested and proven effective in real-world production environments for over four years.

This transformation began with a fresh foundation — a new database (MySQL), a cutting-edge web hosting platform (AWS on Apache), and a robust development environment (PHP). But the improvements don’t stop there. TracCloud features a sleek, modern user interface designed to be exceptionally intuitive and user-friendly, making it easier than ever to navigate and manage your operations. Plus, TracCloud is fully optimized for mobile devices, allowing users to access and utilize its powerful features seamlessly from anywhere. We are now hosted on Amazon Web Services and we are taking advantage of modern cloud security, alert monitoring, and performance monitoring with automatic scalability for on-demand needs.

We are also excited to introduce new modules designed to enhance your campus’s ability to support students effectively. TracInsights for predictive analysis, Wellness Check-ins, and Reflective Prompts empower your campus to stay connected with students across your district. These tools provide instant alerts when students are struggling, allowing you to respond swiftly. Additionally, our TracFlow Automations can initiate timely interventions and connect students with the appropriate services your campus offers, ensuring no student falls through the cracks.

Guided by invaluable customer feedback, we preserved the features that made TutorTrac and AdvisorTrac so popular while embracing an ambitious vision: How can we elevate every great feature from the 4.0 version to be ten times better in the TracCloud version?

We are confident we achieved that vision. TracCloud is now a more powerful, intuitive, and versatile system while remaining affordable for every level of your institution. Whether you are a small writing center using our software for just $2,500 per year, a large multi-center support services department for under $6,000, or an extensive district with multiple campuses utilizing our comprehensive retention bundle (call for pricing), we have the ideal solution to meet your needs.

Most importantly, we are deeply grateful for the ongoing support and loyalty of our customers over the past 25 years. Your feedback and trust have been instrumental in making TracCloud what it is today. As we look to the future, we are excited to continue innovating and finding new ways to make TracCloud even more powerful and effective as a retention tool for your campus.

Training and Assistance for Your Migration
We understand that migrating from your existing, proven solution to a new platform can feel daunting. To make this transition as smooth as possible, we offer personalized one-on-one training sessions and handle the data migration for you. Our team will seamlessly convert your TutorTrac data into the TracCloud format, scheduling both training and migration to ensure minimal downtime and disruption. More importantly, we will perform the training and migration at no additional cost to you.

Unparalleled Tech Support
Redrock has built a strong reputation for responsiveness and availability. Our team remains dedicated to providing the same top-tier, unlimited support that no other company in this industry can match. Our experienced professionals are ready to assist you via support ticket, email, or phone, often responding within hours—if not minutes—of receiving your request. Over the past 25 years, our reputation for stellar support has been well-proven, and we will continue to earn our place as the leader in higher education software through our unwavering commitment to excellence.

Annual Redrock Conference
We will continue to offer in-person training and exclusive previews of the latest features and modules of our software at our annual conference. Customers have consistently reported that this experience provides a valuable opportunity to connect with Redrock team members, network with peers in their industry, share experiences, and gain insights into best practices for using the TracCloud platform effectively at their campuses.

TracCloud: Enhanced Capabilities and Continuous Innovation
TracCloud has been completely rebuilt from the ground up, retaining all existing features while significantly enhancing their performance and usability. Our comprehensive suite of capabilities includes advanced reporting, intuitive scheduling, feedback surveys, online whiteboard meetings, early alert systems, text messaging, study table management, payroll tracking, resource check-in/out, workshop tracking, task management, success plans, terms and conditions waivers, support for unlimited centers, asynchronous appointments, custom fields, custom forms, custom views, work plans, certifications, instructor attendance tracking, testing center group appointments, watch lists, student photos, batch visits, Supplemental Instruction (SI) visit tracking, email templates, and batch emails. All of these powerful features have been further improved and seamlessly integrated with new functionalities, ensuring a more streamlined user experience.

A Modern, Mobile-Friendly Interface
The enhanced TracCloud system offers a responsive, mobile-friendly interface designed for convenience and accessibility. Students can effortlessly schedule appointments by scanning a QR code and tapping a button. Similarly, they can confirm their attendance at a center by scanning a QR code and pressing a single button, providing a smoother, more enjoyable user experience. Every component of TracCloud is now accessible through this sleek, user-friendly interface, enhancing efficiency for both students and administrators.

TracCloud Reporting System is Second to None
Our reporting system capitalizes on the data we receive and generate from the operations that TracCloud manages. Because of the data capture, our reports can comprehensively indicate what resources are needed and how operations can be streamlined to maximize the help that students receive. Reports can be generated automatically by all staff, and data results may be automatically exported on a daily or weekly basis. Reports may be securely emailed on an automated schedule to the people who need the results regularly and timely. Faculty can receive automated reports on student activities, research departments can obtain raw or summarized data indicating important trends, and center administrators can gather feedback on how students are being assisted. All reports utilize the sleek, user-friendly interface that TracCloud is now known for.

Commitment to Continuous Improvement
Since the launch of TracCloud nearly four years ago, we have remained dedicated to enhancing and expanding the platform. This year, we are introducing several new modules that are easy to incorporate into your existing configuration. The Predictive Analytics module helps identify and monitor at-risk students, while the Wellness Check-In module provides valuable insight into students’ emotional well-being. Additionally, our Reflective Prompts feature encourages students to reflect on their educational journey and the steps they are taking to achieve success. All functionalities can be integrated with our TracFlow automation module, enabling timely early alerts and automated student interventions. The newly introduced AI MoodMeter field links allow proactive identification of students who may require additional support. These enhancements are just the beginning, with many more planned for release throughout the year.

TracCloud: An Enterprise Solution that still works for smaller Centers
TracCloud supports single, small centers with limited budgets while providing powerful scalability for large districts with multiple campuses. Our modular approach allows institutions to add features and functionalities as needed, seamlessly integrating them into a cohesive, robust, and user-friendly system. TracCloud continues to provide a comprehensive solution tailored to meet the evolving needs of institutions of all sizes.

A Commitment to a Holistic Approach to Student Well-Being
TutorTrac has historically been a center operations management tool. Our latest improvements with the new TracCloud have focused on the student experience and how centers truly help students succeed. Future modules of TracCloud will strengthen the connection between centers, students, and faculty, while also providing tools for Deans, Provosts, and VPs to oversee the integration of student support services from a high-level perspective. With our extensive experience in center management and student support, TracCloud is uniquely positioned to provide these essential reporting capabilities, thanks to our ability to gather data directly from the source.

Now, we proudly introduce TracCloud — our latest innovation in student retention and engagement, designed to streamline the management of your learning, writing, advising, or other support centers on your campus.

New, easy to use interface
TracCloud features a modern, easy to use, and mobile-friendly interface, allowing you to easily find and manage your data as you need. Students, staff, and faculty will have a much easier time navigating through the system and accessing the data they need. The new dashboard offers many easy to access widgets to view and manage your data.



New Features
Export almost any report into Excel. Static and dynamic QR codes for touchless-kiosk environments. Unlimited custom data fields in student records, visits, appointments, and more. Customizable views of listing pages. Student timelines. Twig and HTML-supported emails and system messages. Customizable log listing and kiosk views. Center descriptions. New reports. Student success plans as a new module, along with work plans for staff. The full list of changes couldn't fit in this article, and more is being added all the time. Relating to the schedule specifically, you'll find a new appointments listing, availability badges, custom search appointment links and QR codes, unlimited customizable max appointment rules, asynchronous appointment support, and more.



Customizable
With Twig support, you can personalize system messages, upcoming appointment lists, emails, and more based on the users who are viewing/receiving them. From simple changes like greeting the user by name to completely changing an email based on if the related appointment was in-person or online, in a certain center, for a certain reason, even if a certain custom field in the student's profile has a specific value. This extends to the log listing and kiosks as well, where you can add or remove fields, rearrange the data that's displayed, and add custom formatting with HTML and Twig.



Faster
Rewritten from the ground up hosted on AWS, using a MySQL database, TracCloud is faster in every way. This performance increase compared to TutorTrac or what we now call Trac 4.0 can be noticed throughout the entire system, with reports being especially improved. Even the biggest reports in TracCloud load within a few seconds.



Migrate Existing Data
Migrate your existing data from Trac 4.0, allowing you to pick up right where you left off. We'll work with you to plan out your migration, coordinating with your IT, and training your system administrators to get you started in TracCloud.



Although we now bid the old TutorTrac a fond farewell this year, we appreciate how successful it was for so many centers around the world. The new, easy to use interface of TracCloud will make our current TutorTrac users happy to move to this new version. Moreover, our support team will make the transition easy and painless!

Click here to schedule a TracCloud demo!


HTTPS Connections to your Trac System

The Trac System doesn't inherently support secure connections over HTTPS, a proxy such as Stunnel must be used to facilitate this instead. Other proxies may be used, but Stunnel is the only option that Redrock Software can offer support for. If your Trac System is hosted by Redrock, you will already be able to connect over HTTPS using our domain name (example.go-redrock.com). If you would like to use a custom domain for your hosted system, create a CNAME record pointing to rscprxy.go-redrock.com and provide an Apache X509-compatible certificate and key to us. The cert and key can be uploaded to our SFTP server (same location as your import files). We are unable to provide CSR/.req files. For non-hosted instances, continue reading.


Stunnel / Proxies

There are several options for implementing HTTPS for your Trac server. A web server for HTTPS proxying such as Apache or Nginx can be used, or you can utilize a dedicated proxying application such as HAProxy. These could be running on the same or a separate server. Only internal traffic between the proxy and the Trac System would be in plaintext. As an alternative, a 3rd party application (like Stunnel) may be installed on your Trac System server. The latter is what we at Redrock are able to offically support.

Stunnel is a program that encrypts all connections to your server. Stunnel facilitates this by acting as a proxy between users' browsers and the Trac application. A user would open a web browser and enter in your server address, e.g., https://trac.example.edu/. Stunnel receives the encrypted request, decrypts the request, and then forwards the request to the Trac application. The Trac application will then issue a response back to Stunnel, Stunnel encrypts the response, and then forwards the encrypted response back to the user's browser. With this method, all network traffic from the server to the client is encrypted while the Trac application communicates with Stunnel locally in an unencrypted format.


Installing Stunnel

Click on this link to download and install the latest stable win64-installer. Once the .exe file has downloaded, install Stunnel using the default options. If you already have a certificate, you can close the prompt to generate a certificate/CSR that appears during installation.


Certificate Format

The necessary SSL files are a certificate (typically cert.pem) and a key file (typically key.pem). You will need to obtain your own Apache X509-compatible certificate from any trusted Certificate Authority. Some CAs will provide you with a chained certificate, which we will have to combine in order to make the file compatible. Place the certificate and key files in your Stunnel config directory (C:\Program Files (x86)\stunnel\config). Keep a copy of your req.pem (CSR) file to request your new certificate when it expires.

In the event that you only have a .pfx file available, it can be split into separate certificate and key files for use in Stunnel with the following OpenSSL commands.

openssl pkcs12 -in input.pfx -clcerts -nokeys -out output.crt
openssl pkcs12 -nocerts -in input.pfx -out output.key -nodes

Stunnel Config File

The Stunnel configuration file (stunnel.conf) is located in the C:\Program Files (x86)\stunnel\config directory by default and must be edited. Below is a good default config file. Simply replace the contents of stunnel.conf with this, replacing the IP address and cert/key file names as needed.

Sample stunnel configuration file by Redrock Software

 ; identify the private key and public certificate files, placed in the config directory
 cert = cert.pem
 key = key.pem
 
 ; Some performance tunings
 socket = l:TCP_NODELAY=1
 socket = r:TCP_NODELAY=1
 
 ; Service-level configuration
 [https]
 accept = 192.168.0.42:443
 connect = 192.168.0.42:81
 TIMEOUTclose = 0

; Force TLS 1.2
options = NO_SSLv2
options = NO_SSLv3
sslVersionMin = TLSv1.2

; Ciphers (optional)
ciphers = ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-DSS-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256

Trac System Prefs.ini File

After installing Stunnel, go to your Trac installation folder, and edit /database/prefs.ini. Edit the following lines depending on your configuration, the Trac System must be restarted to apply changed.

If your installation is not using Stunnel and is only accessible via HTTP.

[Server]
serverPort=80
serverPort2=
serverProcs=15
serverProcs2=0
redirect=None
redirect2=None

If your installation is using Stunnel and will be accessible via HTTPS.

[Server]
serverPort=80
serverPort2=81
serverProcs=5
serverProcs2=15
redirect=https://your.trac.domain.edu
redirect2=None

The 'serverPort' variables determine what ports your Trac System is accessible at. The purpose of the second port is for proxies like Stunnel, as incoming connections on port 80 can be redirected to 443 and Stunnel can communicate locally with Trac over port 81 (or any other preferred port).

The 'serverProcs' variables are effectively the processing resources available on each port. The sum total of these two variables should not exceed 20. If your Trac System is only available on port 80, then serverProcs can be set to 15 and serverProcs2 can be 0 (unused). If Stunnel is used, the only purpose of port 80 will be to redirect users to 443 (81 internally). In this case, serverProcs2 should be set to 15 and serverProcs doesn't need as much as it will only be redirecting users.

The 'redirect' variables determine where users are sent when they reach the Trac System on each port. If your Trac System is only accessible on port 80, both redirect variables can be left as "None" as there's nowhere to redirect to. If Stunnel is used, redirect (not redirect2) should send users to your Trac System's https:// URL.

'ServerSecure' and 'ServerSecure2' should both be kept at the default value of 'None' in either case.


Configure Stunnel as a Service

To install Stunnel as a service, run the following command in a Command Prompt window. Note that the Stunnel service and Stunnel application (started from the /bin folder) cannot run at the same time and will cause errors. Always stop the Stunnel application before starting the service, and vice versa.

stunnel.exe -install