4 ms·

Learning how SSH port forwarding is great as a pseudo-vpn for everything from GUI-client database access to (in physical infra) access to web-admin tools for ap

Learning how SSH port forwarding is great as a pseudo-vpn for everything from GUI-client database access to (in physical infra) access to web-admin tools for appliances. The socks proxy support can also deal with bad web filtering and privacy issues on public wifi networks (though nowadays if you're ssh'ing to a cloud IP, you'll get lots of "bot" restrictions).

saltcured 4mo ago
Yeah, I get use out of the SOCKS proxy mode in combination with a "split VPN" at work. I need VPN to get into some internal resources via SSH, but there are lots of external/public/AWS resources I also need to access, and the full VPN adds too much overhead and fragility for those. Using the available split VPN, I can point a browser instance at a localhost SOCKS proxy port to relay over SSH + VPN for other web resources I need to access internally. Unfortunately, Firefox proxy config rules are sort of backwards for my needs. I want to say "only use proxy for these 3 domains" whereas it wants to use the proxy by default and only allow me to bypass specific domains.
- hylaride 4mo ago
  In the past, I've used plugins to do just what you ask. FoxyProxy Standard did the trick (it looks like there's now at least another more standard "VPN" version, too). It looks like Firefox does have support for Native PAC files that'll also do the trick: https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Proxy_servers_and_tunneling/Proxy_Auto-Configuration_PAC_file#example_4 https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Pro...
- Sarky 4mo ago
  Firefox can be used with socks proxies nicely. - Use Multi-Account Containers plugin, where you define which domain should be opened in which container. - Use Container Proxy to configure which socks proxy to use for different containers. Pair that with ssh tunnel that you use as socks proxy and you have nive tunneling solution for browser.
  - saltcured 4mo ago
    Maybe, but what I want is just a toggle or something in the very basic manual proxy config to invert the current configuration model. Here's my ad-hoc proxy. Use it for only these domains (while everything else goes direct). After I complete my special tunneling task, I'm going to flip it back to "no proxy" and resume normal life.
  - pull_my_finger 4mo ago
    I've been a very happy user of firefox container tabs, but this is the first I'd heard of container proxies. Any resources on them you can share?
  - sigsergv 4mo ago
    Or use plugins like foxyproxy that implement transparent rule-based routing without containers.
TacticalCoder 4mo ago
> The socks proxy support ... I just love SOCKS proxy in SSH tunnels: at some point I had a dedicated server (on a fixed IP) with countless machines (usually headless Pis dropped at a family member's place and/or SME office) automatically setting up, 24/7, reverse tunnels to that dedicated server. Then I could, from anywhere, both access their LANs (to fix stuff) and have a browser, running locally, pretending to be in this or that country. Basically because I had all those reverse tunnels always there, I could always decide how to use them (just SSH in or SOCKS in etc.).

saltcured 4mo ago

Yeah, I get use out of the SOCKS proxy mode in combination with a "split VPN" at work. I need VPN to get into some internal resources via SSH, but there are lots of external/public/AWS resources I also need to access, and the full VPN adds too much overhead and fragility for those. Using the available split VPN, I can point a browser instance at a localhost SOCKS proxy port to relay over SSH + VPN for other web resources I need to access internally. Unfortunately, Firefox proxy config rules are sort of backwards for my needs. I want to say "only use proxy for these 3 domains" whereas it wants to use the proxy by default and only allow me to bypass specific domains.

hylaride 4mo ago
In the past, I've used plugins to do just what you ask. FoxyProxy Standard did the trick (it looks like there's now at least another more standard "VPN" version, too). It looks like Firefox does have support for Native PAC files that'll also do the trick: https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Proxy_servers_and_tunneling/Proxy_Auto-Configuration_PAC_file#example_4 https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Pro...
Sarky 4mo ago
Firefox can be used with socks proxies nicely. - Use Multi-Account Containers plugin, where you define which domain should be opened in which container. - Use Container Proxy to configure which socks proxy to use for different containers. Pair that with ssh tunnel that you use as socks proxy and you have nive tunneling solution for browser.
- saltcured 4mo ago
  Maybe, but what I want is just a toggle or something in the very basic manual proxy config to invert the current configuration model. Here's my ad-hoc proxy. Use it for only these domains (while everything else goes direct). After I complete my special tunneling task, I'm going to flip it back to "no proxy" and resume normal life.
- pull_my_finger 4mo ago
  I've been a very happy user of firefox container tabs, but this is the first I'd heard of container proxies. Any resources on them you can share?
- sigsergv 4mo ago
  Or use plugins like foxyproxy that implement transparent rule-based routing without containers.

TacticalCoder 4mo ago

> The socks proxy support ... I just love SOCKS proxy in SSH tunnels: at some point I had a dedicated server (on a fixed IP) with countless machines (usually headless Pis dropped at a family member's place and/or SME office) automatically setting up, 24/7, reverse tunnels to that dedicated server. Then I could, from anywhere, both access their LANs (to fix stuff) and have a browser, running locally, pretending to be in this or that country. Basically because I had all those reverse tunnels always there, I could always decide how to use them (just SSH in or SOCKS in etc.).