6 ms·
This is a neat idea, but still requires running a local executable. To ease adoption, a web app would be better. So how about a ngrok like service where you ju
by ovi256 7y ago
This is a neat idea, but still requires running a local executable. To ease adoption, a web app would be better.
So how about a ngrok like service where you just open a page to forward local traffic ? The vulnerability we've seen yesterday, "A web page can see your local servers", suggests it's doable. The webrtc code needs to open a HTTP connection to the local server. JS code would proxy all requests coming through an external hostname to this local server. Is this doable ?
"I can see your local servers" https://news.ycombinator.com/item?id=20028108 https://news.ycombinator.com/item?id=20028108
- antoniomika 7y agoShameless self plug That is the exact reason I made sish (ssi.sh). It uses ssh to do local port forwarding and can be self hosted with authentication. It's open source[0] and the only thing you need locally is SSH (which is included by default on most systems). [0]: https://github.com/antoniomika/sish https://github.com/antoniomika/sish
- tootie 7y agoNeat! This is like a self-hosted version of ngrok? So you'd just need a public host somewhere and then you can tunnel in. I've been doing some edge computing stuff recently with Windows, so I'd love to try this with RDP.
- antoniomika 7y agoYep, that's exactly it! Because it supports TCP forwarding, that sounds like it should work!
- olafalo 7y agoThis is cool! I came up with something similar for hosting a few personal sites from my home network, except I did it the other way around - I built a docker image that does the SSH tunneling part. The external host is just a cheap droplet with GatewayPorts set to yes in the sshd config. A benefit of doing it this way is that you don't even have to expose localhost; I have Caddy running in another container in a docker-compose.yml file, so I can forward it directly with: ssh -R 80:caddy:80 -R 443:caddy:443 So all the networking happens within the network created by docker-compose.
- antoniomika 7y agoNice, that's something that's useful too. I think this is especially important as it pertains to home services/exposed things. I just wanted to build my own tools around it mainly for the virtual hosting/websockets support. Also I just find these things fun to write and figure out :)
- herohamp 7y agoThis sounds like a fun summer projects. I'll take a look