6 ms·
Can you elaborate on what makes stunnel or ssh tunneling "gross"? Is it the network overhead they add or is it the complexity of the protocol, or is it somethin
by justin_oaks 5y ago
Can you elaborate on what makes stunnel or ssh tunneling "gross"? Is it the network overhead they add or is it the complexity of the protocol, or is it something else?
- H8crilA 5y agoNot the author but the reliability of a simple SSH tunnel is horrible. I still use it occasionally because it's "always there".
- cperciva 5y agoProtocol complexity, number of vulnerabilities in the codebase, and for ssh there's reliability as well. (SSH tunnels multiplex connections over a single TCP connection, whereas TLS and spiped map one TCP connection to one TCP connection.)
- eps 5y agoBut what's wrong with stunnel?
- cperciva 5y agoProtocol complexity and the number of vulnerabilities in the codebase.
- anthk 5y agoOpenSSH too?
- danielheath 5y agoIt’s not a small project...
- eps 5y agoThat's a rather gratuitous argument that applies to anything that uses TLS or OpenSSL libarary.
- cperciva 5y agoI agree that it applies to anything which uses TLS. I disagree that it's gratuitous.
- atatatat 5y agoIt's not Wireguard.