4 ms·
Open network border and SSH to servers/workstations (key access only). I can easily work from anywhere. I tunnel my web browser via SSH, too, when I need to acc
by _wldu 6y ago
Open network border and SSH to servers/workstations (key access only). I can easily work from anywhere. I tunnel my web browser via SSH, too, when I need to access internal org websites. SSH is really all you need. You definitely don't need (largely useless) network firewalls that make you feel secure.
- mr_toad 6y agoUnless the internal applications are poorly secured. It’s not unusual.
- Kalium 6y agoIt's exceptionally common. I've encountered what seems like a wildly unreasonable number of otherwise smart, competent, capable devs possessed of the bizarre belief that having a firewall or NACLs means they don't have to: * Have authentication on their services, nevermind authorization. * Use TLS on their microservices. * Patch their libraries. Or in any way pay attention to security. The egg is a very common network security model.
- mustardo 6y agoSSH is awesome for this, at least with a low head count. With a good SSH config (key only, rate limiting etc) bastion (jump boxes) you can go a long way. I keep meaning to try https://github.com/sshuttle/sshuttle https://github.com/sshuttle/sshuttle