wasn't that the idea of ssh to begin with?
[deleted]
SSH into private machines from anywhere using Cloudflare Tunnel
41–50 of 197 posts
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#42Can we stop posting stuff that makes even more people give the keys of their house to the BigCorp cartel?
This configured system, unlike the rest of the way CloudFlare works with http, is actually end to end encrypted.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#43Unfortunately the cloudflared software, while the source is available on GitHub, and there are pull requests open and accepted for it, is not under an open source license, and the license it is under does not allow modifications, so any modifications (including the aformentioned pull requests) are contrary to the license and thus copyright law and thus illegal. The issue I filed about this is still waiting for action…
Hello from the Cloudflare team - thanks for the nudge. We're in the process of migrating away from the proprietary license to an Apache license. We'll update the GitHub issue too; should be wrapped up in the next couple of weeks but likely sooner.
Could you also provide an update on this issue about the Cloudflare open source contact address?
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#44> Question: do you use a different tool which require no maintenance or cost to run? Answer: ZeroTier -- on Mac, Linux (home & cloud), Windows, Android I actually setup DNS entries resolving to private IPs as configured in ZeroTier so I didn't have to login to dig them up but my default DNS provider won't resolve them. I guess newer ZeroTier versions optionally have DNS covered these days but I haven't looked into it…
I use ZeroTier, but only with Linux boxes (also used on a Mac when I had one), so instead of DNS I use nss-mdns and avahi. It is enough to install and it just works - computers are available under $HOSTNAME.local.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#45If you are all about self hosting, here’s my method (disclosure, I made this tool):
1. Run https://github.com/antoniomika/sish on any free tier instance or fly
2. On server, ssh -R anythinghere:22:localhost:22 sishinstance
3. On client, ssh -J anythinghere sishinstance
The tunnel is kept internal to sish, meaning it isn’t exposed to the open internet. You need to auth first to sish (using SSH) and then auth with your server (using SSH) as well before you can gain access.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#46You can get virtual server for $4/month. Installing proprietary software and registering to some service, that may "upgrade" to premium tier anytime, is pretty off-putting.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#47wasn't that the idea of ssh to begin with?
You mean, like just login to a server without going through layers of cloud providers? How would that work?
For real, I can't imagine running a straight port 22 ssh service on the modern internet, but I'm usually happy just moving it to an unprivileged port for obscurity on personal equipment (plus some other common sense hardening of course). For work stuff, I'd feel naked without some sort of VPN and it seems that's essentially what these services are.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#48Unfortunately the cloudflared software, while the source is available on GitHub, and there are pull requests open and accepted for it, is not under an open source license, and the license it is under does not allow modifications, so any modifications (including the aformentioned pull requests) are contrary to the license and thus copyright law and thus illegal. The issue I filed about this is still waiting for action…
Breaking a contract is not illegal. Seems to be a common misconception.
Please explain? I've googled your sentiment and have found some links but not many answers. Breaking a contract is just as illegal (~ against the law) as breaking the law? This follows trivially from contract law being a part of law. More substantive: Both contracts and laws proscribe actions. One can find remedy for breaking either via the legal system. (Obviously the severity of punishment can differ several orders of magnitude.) Only if you limit 'illegal' to criminal law you might be right in some jurisdictions.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#49shameless self-promotion: https://sshreach.me
We have a ssh reverse-forwarding based solution. And unlike the Cloudflare solution you don't need to "give the keys of your house" (as someone here commented) to reach your private machines.
You can remotely open and close the tunnels through our web interface or our web API.
Plus, we have web API-based automated deployment solution if you have many clients.
Re: SSH into private machines from anywhere using Cloudflare Tunnel
#50You can get virtual server for $4/month. Installing proprietary software and registering to some service, that may "upgrade" to premium tier anytime, is pretty off-putting.
If they upgrade to premium tier, set up your virtual server then. Your total cost, $0 for the duration it's free + $4 * the rest is still lower than $4 * lifetime, and the cost for switching is only going to be marginal.