3 ms·
I believe these days SSH is willing to forward a UNIX domain socket to a remote TCP port, or a local TCP port to a remote UNIX domain socket, or any combination
by jclulow 2y ago
I believe these days SSH is willing to forward a UNIX domain socket to a remote TCP port, or a local TCP port to a remote UNIX domain socket, or any combination of the two families really. You could use names locally, if your client tools are willing to do AF_UNIX!
- mjw1007 2y agoThe nice thing about this is that, with filesystem permissions on one end and a check for SCM_CREDENTIALS or SO_PEERCRED on the other, you can effectively get user-based access control working between two machines. I think this is the one remaining advantage of ssh tunnels over using a VPN. NB if you're doing this sort of thing, you probably want to add `StreamLocalBindUnlink yes` to the ssh options.
- aflukasz 2y agoAnd if you are wondering, if you can just point your browser to a local unix socket (without setting up a proxy - which will listen on... local tcp port), then no, but maybe some day? Anyway: - https://bugzilla.mozilla.org/show_bug.cgi?id=1688774 https://bugzilla.mozilla.org/show_bug.cgi?id=1688774 - [open] "Support HTTP over unix domain sockets" - 4 years old, last activity 7 months ago, - https://issues.chromium.org/issues/40402523 https://issues.chromium.org/issues/40402523 - [closed; won't fix] "[ENH] Support HTTP over Unix Sockets via http://localhost:[/tmp/socket]/foo http://localhost:[/tmp/socket]/foo convention " - 9 years old, last activity 11 months ago.