4 ms·

You can do this with screen/tmux too...no need to connect to some server where you can't audit their code.

by Moral_ 10y ago

old-gregg 10y ago
If both machines aren't separated by NAT, you could. Except you'd need to either share you local password or an SSH key with another party, which is pretty inconvenient. But most of the time you can't directly SSH into your laptop at home because it's behind NAT, so you need an SSH bastion, and we figured it's not expensive to host, why not put one out there for free. And the code is all on github. Teleport (https://github.com/gravitational/teleport https://github.com/gravitational/teleport) is the server/proxy part.
- pmalynin 10y ago
  https://samy.pl/pwnat/ https://samy.pl/pwnat/
  - old-gregg 10y ago
    That's really cool, can't wait to play with it, thanks!
- Symbiote 10y ago
  Are there people with SSH running on their laptop at home who haven't set up port forwarding? It's the first thing I do when setting up a new router. I also like having a public IP on my desktop (and laptop) at work.
  - comboy 10y ago
    That would be me. I have openvpn setup everywhere, and I would hate to have a public IP on a computer on which I work. Sooner or later I would forget about adding some iptables for redis, database or dev applications that I'm running. I mean in theory that would be just a few simple firewall rules that I wouldn't need to change, but on long enough time I would screw something up exposing myself, so the more layers the better.
    - Symbiote 10y ago
      There is a firewall between the work network and the outside world. You'd need to ask the sysadmin (me) to open a port. Only a couple of developers use it, and only to run Apache or similar.
  - brbsix 10y ago
    I used to, but ZetoTier[0] has made that a thing of the past. Now, no matter where I am or what sort of connection I have, it's like I have all my devices (and a few other people's) on a local LAN. I use it all the time to SSH into my laptop from my phone when I leave it someplace. I really can't recommend it highly enough. [0]: https://www.zerotier.com https://www.zerotier.com
- NetStrikeForce 10y ago
  You could have an overlay network to give full visibility between hosts avoiding NAT completely. Also, inside the overlay network the IP addresses do not necessarily change, as opposed to the public IP address of your laptop when you move it somewhere else :-) I work on an overlay network solution called Wormhole: http://wormhole.network http://wormhole.network

You can do this with screen/tmux too...no need to connect to some server where you can't audit their code.

by Moral_ 10y ago

You can do this with screen/tmux too...no need to connect to some server where you can't audit their code.

If both machines aren't separated by NAT, you could. Except you'd need to either share you local password or an SSH key with another party, which is pretty inconvenient. But most of the time you can't directly SSH into your laptop at home because it's behind NAT, so you need an SSH bastion, and we figured it's not expensive to host, why not put one out there for free. And the code is all on github. Teleport (https://github.com/gravitational/teleport https://github.com/gravitational/teleport) is the server/proxy part.

pmalynin 10y ago
https://samy.pl/pwnat/ https://samy.pl/pwnat/
- old-gregg 10y ago
  That's really cool, can't wait to play with it, thanks!
Symbiote 10y ago
Are there people with SSH running on their laptop at home who haven't set up port forwarding? It's the first thing I do when setting up a new router. I also like having a public IP on my desktop (and laptop) at work.
- comboy 10y ago
  That would be me. I have openvpn setup everywhere, and I would hate to have a public IP on a computer on which I work. Sooner or later I would forget about adding some iptables for redis, database or dev applications that I'm running. I mean in theory that would be just a few simple firewall rules that I wouldn't need to change, but on long enough time I would screw something up exposing myself, so the more layers the better.
  - Symbiote 10y ago
    There is a firewall between the work network and the outside world. You'd need to ask the sysadmin (me) to open a port. Only a couple of developers use it, and only to run Apache or similar.
- brbsix 10y ago
  I used to, but ZetoTier[0] has made that a thing of the past. Now, no matter where I am or what sort of connection I have, it's like I have all my devices (and a few other people's) on a local LAN. I use it all the time to SSH into my laptop from my phone when I leave it someplace. I really can't recommend it highly enough. [0]: https://www.zerotier.com https://www.zerotier.com
NetStrikeForce 10y ago
You could have an overlay network to give full visibility between hosts avoiding NAT completely. Also, inside the overlay network the IP addresses do not necessarily change, as opposed to the public IP address of your laptop when you move it somewhere else :-) I work on an overlay network solution called Wormhole: http://wormhole.network http://wormhole.network