4 ms·
a while ago I found out that you could do this by running a tor hidden service on the device. If I needed it, I think I'd rather use that, or a reverse tunnel t
by fimdomeio 9y ago
a while ago I found out that you could do this by running a tor hidden service on the device. If I needed it, I think I'd rather use that, or a reverse tunnel than going through a third party.
- bopodelvalle 9y agoCan you explain a little bit more how do you do this?
- drb91 9y agoI don’t know much but a little googling reveals this: https://nurdletech.com/linux-notes/ssh/hidden-service.html https://nurdletech.com/linux-notes/ssh/hidden-service.html
- scrappyjoe 9y agoAfter the HN comment on this a few weeks ago I implemented the Tor ssh method. The bottom of this script is what I run on my remote servers to get Tor ssh access, if want to see an example of working code - https://github.com/riazarbi/serversetup/blob/master/remote_deployment_scripts/ufw_jupyter_rstudio_torSSH_setup.sh https://github.com/riazarbi/serversetup/blob/master/remote_d...
- dannyw 9y agoIf you don't want the anonymity benefits, you can change the hops from 3 to 1 (from the client) to improve latency.
- yjftsjthsd-h 9y agoThere's also a server (hidden service) option to disable anonymity. Use with caution, of course.
- fimdomeio 9y agovia tor: https://nurdletech.com/linux-notes/ssh/hidden-service.html https://nurdletech.com/linux-notes/ssh/hidden-service.html via reverse proxy: `ssh -NT -R 1234:localhost:22 youruser@yourmachine.com` Now if you connect to youruser@yourmachine.com you can then ssh to your inaccessible machine with `ssh inaccessibleuser@inaccessiblemachine:1234 `
- cmars 9y agoI feel the same way about depending on, and routing my traffic through third-party services. I've recently developed a utility[0] to help simplify setting up hidden services w/client auth for this purpose, you might find interesting. [0] https://github.com/cmars/ormesh https://github.com/cmars/ormesh