9 votes

Curl through intermediate server

You could also use a oneliner, this saves you from having to maintain a tunnel in another process. ssh user@server1 curl http://server2/path -o - On other words, curl doesn't support ssh tunnels, ...
Bas's user avatar
  • 91
8 votes

SSH known_hosts with a dynamic IP

The known_hosts file is for providing these keys and there's no direct command line alternative (and it wouldn't be so handy, anyway). However, your goal is completely possible with the known_hosts ...
Esa Jokinen's user avatar
  • 49.7k
8 votes

OpenVPN persist-tun option - what's the point?

There can be 3 reasons for using persist-tun 1- You need root permissions to be able to manage interfaces. If OpenVPN changes to nobody/nogroup it can't add/remove interfaces. Therefore it would be ...
yurtesen's user avatar
  • 200
7 votes
Accepted

Cannot Delete GRE Tunnel

The gre0 tunnel interface is named as the fallback interface and has special meaning. It's created by ip_gre kernel module at initialization of module. You cannot disable this feature. When the host ...
Anton Danilov's user avatar
6 votes
Accepted

SSH LocalForward Through Middle Machine

First Check if port 8081 of your web server is accessible from the middle server. If yes then you just have to use ip address of the server instead of localhost in LocalForward configuration. If no ...
Gaurav Pundir's user avatar
6 votes
Accepted

Curl through intermediate server

Curl doesn't have this functionality, and in any case it would have to be a server option. In the case of HTTP, this means configuring a proxy of some kind. If you can't modify the server ...
Alex Forbes's user avatar
  • 2,462
6 votes

How can I use Apache as a reverse proxy for https?

My company uses a CMS system hosted in the cloud. We want to create internally DNS-aliases to make it easier for developers to remember. If your developers can't follow the link you provide them ...
HBruijn's user avatar
  • 80.2k
4 votes
Accepted

Forward an FTP/SFTP connection to another server (instead of tunneling from the client)

With HAProxy you can create a TCP proxy to proxy the connection back to the backend server. I do this frequently.
Linuxx's user avatar
  • 1,189
4 votes
Accepted

How can I use Apache as a reverse proxy for https?

The answer by HBruijn did explain some of the tricky parts for me, but I have still not been able to solve it. But I have managed to get around the SSL-issue simply by adding SSLProxyEngine on ...
rhellem's user avatar
  • 305
3 votes

Routes for two openvpn connections (different hosts) in the same client

Main routing table Only 1 default route is possible per routing table. If you want to add the routes to the main routing table, then you need to decide which gateway shall be used as default route. ...
rda's user avatar
  • 1,967
3 votes
Accepted

How to make ssh based vpn?

Two and half year left since I asked that question... Now I found another solution which is extremely simple. You can just use tool called sshuttle. From sshuttle manual: sshuttle allows you to ...
devstructor's user avatar
3 votes

How do I SSH tunnel using PuTTY or SecureCRT through gateway/proxy to development server?

Using a fairly recent version of SecureCRT (I'm running 7.3.7 for this example), here is how you do it: 1.) Set up a new connection to your jump-off server (ext) with the IP address 1.1.1.1, as given ...
Oliver Jones's user avatar
3 votes

How to tell if an ssh ControlMaster connection is in use

@Renik's answer didn't work for me. See below for what did. This works for me using just the socket file for the control master: $ ssh -o ControlPath=~/.ssh/<controlfile> -O check <bogus ...
slm's user avatar
  • 7,730
3 votes

Tunneling between two servers

You can use gost to forward traffic from First Server to Second one. For example in first server you can listen on Shadowsocks (ss) and Forward the traffic via sock5 to the second server. Then in the ...
Arash Mousavi's user avatar
3 votes
Accepted

FTP over SSH (not SFTP?) when files are on third server not SSH server

The "conventional" solution for that is to use an FTP client that has SOCKS 5 support and rather than forwarding specific ports over ssh, configure dynamic port forwarding (the ssh client ...
Rob's user avatar
  • 1,193
3 votes

Choose any available SSH tunnel

Assuming -J destination (ProxyJump) is available on your version of the SSH client. Configure your hosts (both destination and jump host) using ~/.ssh/config with the keywords found in ssh_config(5). ...
Esa Jokinen's user avatar
  • 49.7k
2 votes

Cannot Delete GRE Tunnel

You need to verify that the gre module is completely removed. Run sudo lsmod | grep gre to check if the module is in the list. If it is, run sudo rmmod ip_gre sudo rmmod gre to remove them from ...
Tony's user avatar
  • 21
2 votes

How would you send syslog *securely* over the public Internet?

I'm using rsyslog with tls. There is some out of scope prep work: Deploy a local CA, add the CA's cert to each host, generate individual certs for each host. (now all of your hosts can talk ssl to ...
jorfus's user avatar
  • 785
2 votes

SSH port forwarding through Windows machine

Windows has the builtin port mapping mechanism: netsh interface ipv6 install # Port forwarding needs to enable ipv6 netsh interface portproxy add v4tov4 listenaddress=123.234.12.34 listenport=22 ...
ASBai's user avatar
  • 181
2 votes

How to make ssh based vpn?

Thanks to Jeff Meden comment I managed to do it. I adjusted that script: github.com/oicu/vpn-over-ssh/blob/master/svpn.sh to my needs, and finally it worked: My version: #!/bin/bash PATH=/usr/local/...
devstructor's user avatar
2 votes
Accepted

VXLAN format details

VXLAN is a layer 2 framework so when one VTEP wants to send data to another VTEP, it will create a layer 2 VXLAN frame (basically an Ethernet frame). This frame then needs to be delivered to the IP ...
USD Matt's user avatar
  • 5,411
2 votes

Android OpenVPN disconnects the SSH tunnel

The question is old, but since there is no accepted answer I thought my answer might help anyone facing this issue... . This happens because the packets passing through the ssh tunnel are forced to ...
Ali Nem's user avatar
  • 121
2 votes
Accepted

Is it possible to create iface teaming/bonding over tunnel devices?

Tunnels work on different layer and you can't bond them like physical interfaces. For simply failover, your tunnels will work as is: they all have the same routes. If you need more flexibility for ...
Esa Jokinen's user avatar
  • 49.7k
2 votes

Tuning network interface for TCP over TCP in Linux

This is a tricky situation. I hope you'll eventually be able to replace the entire application with something that's better designed. There isn't much you can do at the TUN/TAP level, because is a ...
kasperd's user avatar
  • 30.7k
2 votes

dedicated tunnel between two data center?

This part of networking is typically referred to as data center interconnect. You have to be very specific in what tunnel means. It could be a VPN tunnel over the Internet. Relatively inexpensive, ...
John Mahowald's user avatar
2 votes
Accepted

Failed to connect to host with RKE

What kind of SSH authentication are you using? It seems that your SSH server only accepts SSH keys. This is fine, if rke has a valid key which need to be specificed in the configuration (either global ...
Lion's user avatar
  • 508
2 votes
Accepted

Linux GRE - ip tunnel vs ip link

Both iproute2's commands interact with the same kernel, they don't implement anything except this communication only, effectively meaning you should expect no difference in terms of performance. As ...
poige's user avatar
  • 9,513
2 votes

How to use public IPs from remote network in my local network

Implement IPv6. Give each site a generous allocation, in an address plan that fits your organization. At least a /56, which is a couple hundred /64 subnets. Every device gets public IPs. Yes, you will ...
John Mahowald's user avatar
2 votes

FTP over SSH (not SFTP?) when files are on third server not SSH server

You can use SSH as a SOCKS proxy. The SSH client on A will work as a SOCKS5 server, tunneling all connection requests to B. You'll need a SOCKSified FTP client on A. How you activate the SOCKS proxy ...
Tilman Schmidt's user avatar
1 vote

SSH known_hosts with a dynamic IP

Using the useful answer of Esa Jokinen and automatizing the process here my solution: #!/bin/sh previous_IP_OR_known_host_key_line=$1 current_IP=$2 user=$3 port=$4 #random extension to avoid ...
Ilmanowar's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible