Re: “Stripped-down” SSH (no encryption or authentication, just forwarding)

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



On 2019-10-15 20:00, asymptosis wrote:
> On Tue, Oct 15, 2019 at 07:43:00PM -0400, Demi M. Obenour wrote:
>> On 2019-10-15 19:11, Job Snijders wrote:
>>> The S in SSH stands for secure. You are asking the wrong group of people.
>>> You’ll have to resolve your issue in some other way.
>>>
>> This tool would only support running on stdin/stdout.  Indeed,
>> an idiomatic use-case would be to use it as the command argument
>> to ssh(1).  The assumption I am making is that anyone that can pass
>> arbitrary data to this tool over stdin can also obtain a shell (with
>> the same privileges).
> 
> It smells like an XY-problem. I gather you are after something like a reverse proxy, so why not just use something which advertises reverse proxying, like nginx or haproxy?
> 
> If they are still too heavy I would also check whether your requirements could
> be met by netcat.
> 
As I mentioned in another email, what I am really looking for is
multiplexing multiple socket connections over a single full-duplex
stream.  None of the tools you just mentioned can do this.  HTTP/2
connection multiplexing can almost do this, but my understanding is
that it is meant as an optimization only.

If you do know of such a tool, I would love to know what it is!

Thank you,

Demi


Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux