5 ms·
Wow, this is a security vulnerability potentially affecting me. I'm using ProxyCommand because GitHub is randomly blocked by the China GFW.
by bdd8f1df777b 3y ago
Wow, this is a security vulnerability potentially affecting me. I'm using ProxyCommand because GitHub is randomly blocked by the China GFW.
- zeroimpl 3y agoTry ProxyJump instead - it’s the newer way of doing it.
- bdd8f1df777b 3y agoProxyJump is to connect to one SSH server by another SSH, right? It doesn't work against GFW. GFW throttles SSH traffic across borders to ensure that SSH can only be used for running commands rather than tunneling data.
- zeroimpl 3y agoYeah I assumed that's what you were doing, since you mentioned Github blocked specifically. If you need to proxy through a protocol other than SSH, likely need to keep using ProxyCommand.
- leftcenterright 3y agoThis is interesting insight, would you care to share some parts of your ssh config indicating how you use ssh over a proxy here, most likely through a VPN?
- bdd8f1df777b 3y ago``` Host github.com ProxyCommand connect -H localhost:54321 %h %p ``` localhost:54321 is a SOCK5 proxy, which forwards the traffic through TLS to my VPS server.
- _lvbh 3y agoIt doesn’t affect you as it only works when your proxy string comes from an untrusted source.