9
votes
Curl through intermediate server
You could also use a oneliner, this saves you from having to maintain a tunnel in another process.
ssh user@server1 curl http://server2/path -o -
On other words, curl doesn't support ssh tunnels, ...
8
votes
SSH known_hosts with a dynamic IP
The known_hosts file is for providing these keys and there's no direct command line alternative (and it wouldn't be so handy, anyway). However, your goal is completely possible with the known_hosts ...
8
votes
OpenVPN persist-tun option - what's the point?
There can be 3 reasons for using persist-tun
1- You need root permissions to be able to manage interfaces. If OpenVPN changes to nobody/nogroup it can't add/remove interfaces. Therefore it would be ...
7
votes
Accepted
Cannot Delete GRE Tunnel
The gre0 tunnel interface is named as the fallback interface and has special meaning. It's created by ip_gre kernel module at initialization of module. You cannot disable this feature.
When the host ...
6
votes
Accepted
SSH LocalForward Through Middle Machine
First Check if port 8081 of your web server is accessible from the middle server. If yes then you just have to use ip address of the server instead of localhost in LocalForward configuration. If no ...
6
votes
Accepted
Curl through intermediate server
Curl doesn't have this functionality, and in any case it would have to be a server option. In the case of HTTP, this means configuring a proxy of some kind. If you can't modify the server ...
6
votes
How can I use Apache as a reverse proxy for https?
My company uses a CMS system hosted in the cloud. We want to create internally DNS-aliases to make it easier for developers to remember.
If your developers can't follow the link you provide them ...
4
votes
Accepted
Forward an FTP/SFTP connection to another server (instead of tunneling from the client)
With HAProxy you can create a TCP proxy to proxy the connection back to the backend server. I do this frequently.
4
votes
Accepted
How can I use Apache as a reverse proxy for https?
The answer by HBruijn did explain some of the tricky parts for me, but I have still not been able to solve it. But I have managed to get around the SSL-issue simply by adding
SSLProxyEngine on
...
3
votes
Routes for two openvpn connections (different hosts) in the same client
Main routing table
Only 1 default route is possible per routing table. If you want to add the routes to the main routing table, then you need to decide which gateway shall be used as default route.
...
3
votes
Accepted
How to make ssh based vpn?
Two and half year left since I asked that question... Now I found another solution which is extremely simple. You can just use tool called sshuttle.
From sshuttle manual:
sshuttle allows you to ...
3
votes
How do I SSH tunnel using PuTTY or SecureCRT through gateway/proxy to development server?
Using a fairly recent version of SecureCRT (I'm running 7.3.7 for this example), here is how you do it:
1.) Set up a new connection to your jump-off server (ext) with the IP address 1.1.1.1, as given ...
3
votes
How to tell if an ssh ControlMaster connection is in use
@Renik's answer didn't work for me. See below for what did.
This works for me using just the socket file for the control master:
$ ssh -o ControlPath=~/.ssh/<controlfile> -O check <bogus ...
3
votes
Tunneling between two servers
You can use gost to forward traffic from First Server to Second one.
For example in first server you can listen on Shadowsocks (ss) and Forward the traffic via sock5 to the second server. Then in the ...
3
votes
Accepted
FTP over SSH (not SFTP?) when files are on third server not SSH server
The "conventional" solution for that is to use an FTP client that has SOCKS 5 support and rather than forwarding specific ports over ssh, configure dynamic port forwarding (the ssh client ...
3
votes
Choose any available SSH tunnel
Assuming -J destination (ProxyJump) is available on your version of the SSH client.
Configure your hosts (both destination and jump host) using ~/.ssh/config with the keywords found in ssh_config(5).
...
2
votes
Cannot Delete GRE Tunnel
You need to verify that the gre module is completely removed. Run
sudo lsmod | grep gre
to check if the module is in the list. If it is, run
sudo rmmod ip_gre
sudo rmmod gre
to remove them from ...
2
votes
How would you send syslog *securely* over the public Internet?
I'm using rsyslog with tls.
There is some out of scope prep work: Deploy a local CA, add the CA's cert to each host, generate individual certs for each host. (now all of your hosts can talk ssl to ...
2
votes
SSH port forwarding through Windows machine
Windows has the builtin port mapping mechanism:
netsh interface ipv6 install # Port forwarding needs to enable ipv6
netsh interface portproxy add v4tov4 listenaddress=123.234.12.34 listenport=22 ...
2
votes
How to make ssh based vpn?
Thanks to Jeff Meden comment I managed to do it. I adjusted that script:
github.com/oicu/vpn-over-ssh/blob/master/svpn.sh to my needs, and finally it worked:
My version:
#!/bin/bash
PATH=/usr/local/...
2
votes
Accepted
VXLAN format details
VXLAN is a layer 2 framework so when one VTEP wants to send data to another VTEP, it will create a layer 2 VXLAN frame (basically an Ethernet frame). This frame then needs to be delivered to the IP ...
2
votes
Android OpenVPN disconnects the SSH tunnel
The question is old, but since there is no accepted answer I thought my answer might help anyone facing this issue... .
This happens because the packets passing through the ssh tunnel are forced to ...
2
votes
Accepted
Is it possible to create iface teaming/bonding over tunnel devices?
Tunnels work on different layer and you can't bond them like physical interfaces. For simply failover, your tunnels will work as is: they all have the same routes.
If you need more flexibility for ...
2
votes
Tuning network interface for TCP over TCP in Linux
This is a tricky situation. I hope you'll eventually be able to replace the entire application with something that's better designed.
There isn't much you can do at the TUN/TAP level, because is a ...
2
votes
dedicated tunnel between two data center?
This part of networking is typically referred to as data center interconnect.
You have to be very specific in what tunnel means. It could be a VPN tunnel over the Internet. Relatively inexpensive, ...
2
votes
Accepted
Failed to connect to host with RKE
What kind of SSH authentication are you using? It seems that your SSH server only accepts SSH keys. This is fine, if rke has a valid key which need to be specificed in the configuration (either global ...
2
votes
Accepted
Linux GRE - ip tunnel vs ip link
Both iproute2's commands interact with the same kernel, they don't implement anything except this communication only, effectively meaning you should expect no difference in terms of performance.
As ...
2
votes
How to use public IPs from remote network in my local network
Implement IPv6. Give each site a generous allocation, in an address plan that fits your organization. At least a /56, which is a couple hundred /64 subnets. Every device gets public IPs.
Yes, you will ...
2
votes
FTP over SSH (not SFTP?) when files are on third server not SSH server
You can use SSH as a SOCKS proxy. The SSH client on A will work as a SOCKS5 server, tunneling all connection requests to B. You'll need a SOCKSified FTP client on A.
How you activate the SOCKS proxy ...
1
vote
SSH known_hosts with a dynamic IP
Using the useful answer of Esa Jokinen and automatizing the process here my solution:
#!/bin/sh
previous_IP_OR_known_host_key_line=$1
current_IP=$2
user=$3
port=$4
#random extension to avoid ...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
tunneling × 381ssh × 117
vpn × 83
linux × 54
networking × 46
ssh-tunnel × 44
ipv6 × 36
openvpn × 33
gre × 28
proxy × 24
windows × 21
firewall × 18
ubuntu × 17
routing × 17
port-forwarding × 17
iptables × 16
linux-networking × 16
ipsec × 16
http × 15
ip × 14
cisco × 13
ipv4 × 12
route × 11
security × 10
nat × 10