Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ENHANCEMENTS] SSH Tunnel Forwarding Management #94

Open
Cerothen opened this issue Jan 7, 2024 · 1 comment
Open

[ENHANCEMENTS] SSH Tunnel Forwarding Management #94

Cerothen opened this issue Jan 7, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@Cerothen
Copy link

Cerothen commented Jan 7, 2024

Is your feature request related to a problem? Please describe.
Simplify external access for users that are CGNAT'd or do not have access to port forwarding on their local network.

Describe the solution you'd like
SSH tunnel management as outlined in this article. https://www.ssh.com/academy/ssh/tunneling-example

This command connects to a remote host, establishes an encrypted SSH connection then forwards the remote port 8080 and sends it to localhost:80. This could be very useful for users trying to have a non-local public address forward arbitrary ports to the local machine to be used in Zoraxy.

ssh -R 8080:localhost:80 public.example.com

Describe alternatives you've considered
Establish the tunnel and keepalive processes intedendently

@Cerothen Cerothen added the enhancement New feature or request label Jan 7, 2024
@tobychui
Copy link
Owner

tobychui commented Jan 7, 2024

I need to think about this feature. As to me, this raise the same concern for security as the "Service Expose Proxy" feature that I still have no idea how to implement.

I guess the best way to implement this will be asking the admin to upload a list of keys to the zoraxy before allowing ssh -R operations to make sure not everyone can create a tunnel with username / password. Maybe I should ask the security expert @yeungalan for some design opinions.

Also I found this which might be helpful later
https://gist.github.com/0187773933/0f1061d6ada5333dbe462ae2bacd7bbd

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants