3 ms·
This looks great, would love to use this instead of ssh for my AWS servers, but not so sure about opening firewall ports 60000-61000. Currently only 80, 443, a
by SkyMarshal 14y ago
This looks great, would love to use this instead of ssh for my AWS servers, but not so sure about opening firewall ports 60000-61000. Currently only 80, 443, and 22 are open, that's a big addition.
Is that SOP for mosh, or do you guys proxy through a mosh-only server to your actual servers, or something else?
- cmer 14y agoYou only need to open 1 udp port afaik. That's what I do anyways. Opening a high port in the 60000s is less risky than 22. You should probably remap ssh to something else. Or you can use ec2 security groups to limit access to certain ips.
- oijaf888 14y agoExcept anyone on the machine can bind to a port above 1024 so if your mosh server process ever exits for any reason a compromised account could bind a backdoored version.