3 ms·

Adding port forwarding to Mosh has a $600 bounty -- highest OSS bounty I've ever seen https://www.bountysource.com/issues/4471419-ssh-port-forwarding-doesn-t-w

• retrir 5y ago
  On high bounties, Qubes OS has a $6500 bounty for GNOME support https://www.bountysource.com/issues/31778112-add-support-for-gnome-in-dom0-gui-domain https://www.bountysource.com/issues/31778112-add-support-for...
• gnyman 5y ago
  there is a fork with port forwarding support https://github.com/rinne/mosh https://github.com/rinne/mosh and a PR with a long discussion https://github.com/mobile-shell/mosh/pull/696 https://github.com/mobile-shell/mosh/pull/696 on why it's not merged you can compile them yourself or if you want to skip the step I recently set up GitHub actions to compile linux binaries of this [1][2], tested by a sample of 1 so no guarantees it works, was planning on doing a tap PR/tap of it at some point also the official developers have been involved a project to solve this while improving the whole-agent approval things also https://github.com/StanfordSNR/guardian-agent https://github.com/StanfordSNR/guardian-agent , but I couldn't get it to work which is why I tried the fork and got that working [1] https://github.com/gnyman/mosh/actions/runs/1068715036 https://github.com/gnyman/mosh/actions/runs/1068715036 [2] https://github.com/gnyman/mosh/actions/runs/1068715035 https://github.com/gnyman/mosh/actions/runs/1068715035
  • codetrotter 5y ago
    > a PR with a long discussion https://github.com/mobile-shell/mosh/pull/696 https://github.com/mobile-shell/mosh/pull/696 on why it's not merged I'm confused. I read the whole thing but couldn't find the specific reason for why it's not been merged. But I assume it's because of the things that were pointed out in the code review comments? Also, the issue you linked is about SSH Agent forwarding, not port forwarding.
    • wngr 5y ago
      Lack of SSH agent forwarding is unfortunately the deal breaker for me..
    • gnyman 5y ago
      Yes you are 100 correct, I mixed up port and agent forwarding, I’ve needed both at different times and last time it was agent forwarding so got confused. There is another issue for port forwarding https://github.com/mobile-shell/mosh/issues/337 https://github.com/mobile-shell/mosh/issues/337 but no PR that I’m aware of. Regarding why it hasn’t been merged, there is a comment on the port forwarding issue which sums it up quite well I think https://github.com/mobile-shell/mosh/issues/337#issuecomment-469768759 https://github.com/mobile-shell/mosh/issues/337#issuecomment... My understanding is that the maintainers prefer doing one thing well (and securely). Which to be honest is something I really appreciate even if it means I might have to figure out some agent and port forwarding workaround :-/ at least I don’t have to worry about if my version of mosh will work with whatever the server runs
• codetrotter 5y ago
  As someone that used to use SSH port forwarding, I have a recommendation that may be a suitable alternative to the lack of port forwarding in Mosh, as well as being an alternative to port forwarding over SSH. Wireguard! This is what I do instead of port forwarding over SSH since quite a while back now. I run a Wireguard VPN on a VPS, and have machines connect to that VPN. This allows me to reach the machines on the VPN from almost anywhere in the world. Recently I changed the port that Wireguard is listening on to port 443 UDP, which also allows me to connect to my VPN from a few public WLANs that are very restrictive on which ports they allow outbound traffic to. Wireguard is super easy to configure and run, and very secure. Definitely give Wireguard a go. It's open source and awesome.
  • mbreese 5y ago
    I think you could setup something like this on the fly too without root access. I’m not entirely sure, but a while back fly.io published [1] an article talking about how they use wireguard-go [2] to do something similar in user space. I might even try this too… [1] https://fly.io/blog/ssh-and-user-mode-ip-wireguard/ https://fly.io/blog/ssh-and-user-mode-ip-wireguard/ [2] https://git.zx2c4.com/wireguard-go/about/ https://git.zx2c4.com/wireguard-go/about/