Re: Connect direct and fallback

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]


On Fri, Feb 18, 2022 at 02:13:15PM +0200, Lars Noodén wrote:
> On 2/18/22 13:36, Brian Candler wrote:
> [snip]
> > (Idea is to make a direct connection to a host on IPv6 where possible,
> > but when connecting from an IPv4-only network fallback to SOCKS)
> Several people have written about something similar in various blog
> posts and microblog posts in recent years[1].  Use of Match Exec in
> ssh_config(5) seems to be the way that is approached:
>  Match host
>         User fred
>  Match host !exec "route -n get -inet6 %h"
>         ProxyJump
> That would allow you to connect directly to the one system if there is
> IPv6 connectivity and hop through a bastion / jump host first if only
> IPv4 connectivity is possible.  The match blocks can be made more
> general with patterns, of course.
> Exec could use route(8), ping(8), nc(1), or a custom script.
I have something similar that detects whether I am on the same LAN as
the destination system, and uses ProxyJump if not:-

    # esprimo may be remote or local (particularly from t470), if it's remote
    # connect via cheddar.halon.
    Match host esprimo exec "! ping -w 1 -c 1 esprimo >/dev/null 2>&1"

Chris Green
openssh-unix-dev mailing list

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux