OpenSSH/Tunelling - Revision history

Pio2pio: /* Local port forwarding diagram */

2021-07-13T13:12:11Z

Local port forwarding diagram

← Older revision		Revision as of 15:12, 13 July 2021
Line 70:		Line 70:
	<source lang=bash>		<source lang=bash>
	Host redshift1		Host redshift1
	HostName 10.1.1.1 # connect to this host		HostName 10.1.1.1 # connect to this host
	User ubuntu # with this user		User ubuntu # with this user
	IdentityFile ~/.ssh/~~ce-analytics-euw1~~.pem # and the private key		IdentityFile ~/.ssh/id_rsa.pem # and the private key
	LocalForward 5439 redshift1.x.x.redshift.amazonaws.com:5439 # listen locally on this port, and forward via HostName to redshift.*:5439		LocalForward 5439 redshift1.x.x.redshift.amazonaws.com:5439 # listen locally on this port, and forward via HostName to redshift.*:5439
	</source>		</source>

2021-07-13T13:11:45Z

Local port forwarding diagram

← Older revision		Revision as of 15:11, 13 July 2021
Line 74:		Line 74:
	IdentityFile ~/.ssh/ce-analytics-euw1.pem # and the private key		IdentityFile ~/.ssh/ce-analytics-euw1.pem # and the private key
	LocalForward 5439 redshift1.x.x.redshift.amazonaws.com:5439 # listen locally on this port, and forward via HostName to redshift.*:5439		LocalForward 5439 redshift1.x.x.redshift.amazonaws.com:5439 # listen locally on this port, and forward via HostName to redshift.*:5439
	</~~souce~~>		</source>

2021-07-13T13:11:31Z

Local port forwarding diagram

@@ Line 67: / Line 67: @@
 = Local port forwarding diagram =
 All commands are executed from Host-A.
 :[[File:ClipCapIt-190807-084304.PNG]]

2021-07-13T13:06:30Z

Shows -L local forwarding tunnels

← Older revision		Revision as of 15:06, 13 July 2021
Line 86:		Line 86:
	= Show current tunnels =		= Show current tunnels =

	== ~~Shows~~ -L local forwarding tunnels ==		== Show -L local forwarding tunnels ==
	netstat -tpln \| grep ssh #t: TCP, p: show process, l: listening, n: numeric values		<source lang=bash>
	(header added, tested on Debian wheezy)		netstat -tpln \| grep ssh #t: TCP, p: show process, l: listening, n: numeric values
	Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name		(header added, tested on Debian wheezy)
	tcp 0 0 127.0.0.1:1443 0.0.0.0:* LISTEN 4036/ssh		Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
			tcp 0 0 127.0.0.1:1443 0.0.0.0:* LISTEN 4036/ssh
			</source>
	Which can be read as: SSH (not SSHd) is listening to local TCP port 1443		Which can be read as: SSH (not SSHd) is listening to local TCP port 1443

2020-04-05T19:10:06Z

Remote port forwarding (reverse SSH tunnel)

← Older revision		Revision as of 21:10, 5 April 2020
Line 27:		Line 27:
	</source>		</source>

	= Remote port forwarding (reverse SSH tunnel~~) =~~		= Remote port forwarding (inbound tunnelling) =
			This is also known as reverse SSH tunnel.
	-R <sourcePort><forwardToHost>:<onPort> <user@gate>		-R <sourcePort><forwardToHost>:<onPort> <user@gate>
	Listen on '''sourcePort''', then forward traffic to '''forwardToHost''' on port '''onPort''' via '''user@gate''' server.		Listen on '''sourcePort''', then forward traffic to '''forwardToHost''' on port '''onPort''' via '''user@gate''' server.

2020-04-05T18:57:14Z

← Older revision		Revision as of 20:57, 5 April 2020
Line 1:		Line 1:
	Different types of tunnelling:		Different types of tunnelling:

	#Local port forwarding: connections from the SSH client are forwarded via the SSH server, then to a destination server		#Local port forwarding(outbound tunnelling): connections from the SSH client are forwarded via the SSH server, then to a destination server
	#Remote port forwarding (reverse SSH tunnel): connections from the SSH server are forwarded via the SSH client, then to a destination server		#Remote port forwarding(inbound tunnelling) (reverse SSH tunnel): connections from the SSH server are forwarded via the SSH client, then to a destination server
	#[[Socks_proxy_using_SSH\|Dynamic port forwarding]]: connections from various programs are forwarded via the SSH client, then via the SSH server, and finally to several destination servers		#[[Socks_proxy_using_SSH\|Dynamic port forwarding]]: connections from various programs are forwarded via the SSH client, then via the SSH server, and finally to several destination servers

2020-04-05T18:52:52Z

Local port forwarding - straight tunnel

← Older revision		Revision as of 20:52, 5 April 2020
Line 5:		Line 5:
	#[[Socks_proxy_using_SSH\|Dynamic port forwarding]]: connections from various programs are forwarded via the SSH client, then via the SSH server, and finally to several destination servers		#[[Socks_proxy_using_SSH\|Dynamic port forwarding]]: connections from various programs are forwarded via the SSH client, then via the SSH server, and finally to several destination servers

	= Local port forwarding - ~~straight tunnel~~ =		= Local port forwarding - outbound tunneling =
	Used when only '''gateway/bastion''' can talk directly to databases (or other servers). The connection is made through gateway so the database see connection coming from the gateway and allows it.		Used when only '''gateway/bastion''' can talk directly to databases (or other servers). The connection is made through gateway so the database see connection coming from the gateway and allows it.
	-L <<span style="color: green">local-port-to-listen</span>>:<<span style="color: blue">remote-host</span>>:<<span style="color: orange">remote-port</span>> <gateway>		-L <<span style="color: green">local-port-to-listen</span>>:<<span style="color: blue">remote-host</span>>:<<span style="color: orange">remote-port</span>> <gateway>

2019-08-07T07:43:09Z

Local port forwarding diagram

← Older revision		Revision as of 09:43, 7 August 2019
Line 67:		Line 67:
	= Local port forwarding diagram =		= Local port forwarding diagram =
	All commands are executed from Host-A.		All commands are executed from Host-A.
			:[[File:ClipCapIt-190807-084304.PNG]]

2019-08-07T07:39:14Z

Local port forwarding diagram

← Older revision		Revision as of 09:39, 7 August 2019
Line 67:		Line 67:
	= Local port forwarding diagram =		= Local port forwarding diagram =
	All commands are executed from Host-A.		All commands are executed from Host-A.


			Local port forwarding keeping all traffic local
			:[[File:ClipCapIt-190807-083052.PNG]]


	Local port forwarding		Local port forwarding
	:[[File:ClipCapIt-190807-082702.PNG]]		:[[File:ClipCapIt-190807-082702.PNG]]
	*<code>-g</code> it's Allow reomote connections (Gateway Ports), so Host-C can connect via Host-A		*<code>-g</code> it's Allow reomote connections (Gateway Ports), so Host-C can connect via Host-A

	~~Local port forwarding keeping all traffic local~~
	~~:[[File:ClipCapIt-190807-083052.PNG]]~~

	= Remote port forwarding diagram =		= Remote port forwarding diagram =

2019-08-07T07:38:30Z

Remote port forwarding diagram

← Older revision		Revision as of 09:38, 7 August 2019
Line 77:		Line 77:
	Remote port forwarding		Remote port forwarding
	:[[File:ClipCapIt-190807-083153.PNG]]		:[[File:ClipCapIt-190807-083153.PNG]]
	~~[[File:Ssh-remote-portforwarding.png\|none\|500px\|left\|Ssh-remote-portforwarding]]~~

	= Show current tunnels =		= Show current tunnels =