Live data from Hacker News

SSH into private machines from anywhere using Cloudflare Tunnel

orth.uk

111–120 of 197 posts

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#111
post #36

Earlier quoted context omitted.

Hello from the Cloudflare team - thanks for the nudge. We're in the process of migrating away from the proprietary license to an Apache license. We'll update the GitHub issue too; should be wrapped up in the next couple of weeks but likely sooner.

Excellent, thanks for the update. Apache isn't what I would have chosen but is reasonable enough.

Curious about this; is it the patent clause? What would you have picked - mit/bsd?

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#114

You can get virtual server for $4/month. Installing proprietary software and registering to some service, that may "upgrade" to premium tier anytime, is pretty off-putting.

My virtual server is $1.67 a month (buyvm.net)

My home firewall blocks all traffic except for incoming SSH from 3 IP addresses in the world. One of those is my virtual server.

If I'm in a hotel with my laptop I run the first command to set up an SSH tunnel to my "home" computer through the cloud virtual server. That listens on my laptop to port 8888 and forwards it through the cloud virtual server to my home computer's SSH daemon listening on port 22

ssh -X -f -C -L 8888:home.mydomain.com:22 -N user@cloud.mydomain.com

ssh -p 8888 user@localhost

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#115
post #71

Earlier quoted context omitted.

what do you mean by public channels? if I was trying to ssh into my machines it works wonderfully for dns resolution.

Cloudflare tunnels expose ports publicly. Tailscale must be properly configured on your client machine to access machines/ports on their respective private Tailscale network(s), setup of which typically requires administrative intervention. Without bridging to a public network, services exposed to the Tailscale network are not accessible publicly. Tailscale does offer user-mode clients so it can be used similarly to…

not sure where you're getting the idea you need admin intervention for tailscale. I've never needed to do anything beyond authenticate the machine with my account. tailscale has NAT traversal built into it.

If your network firewall is preventing the tunneling process, then that's on you. and if its not on you and its a company decision then its VERY unlikely they'd be okay with cloudflare's publicly exposed ports.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#116

> Question: do you use a different tool which require no maintenance or cost to run? Answer: ZeroTier -- on Mac, Linux (home & cloud), Windows, Android I actually setup DNS entries resolving to private IPs as configured in ZeroTier so I didn't have to login to dig them up but my default DNS provider won't resolve them. I guess newer ZeroTier versions optionally have DNS covered these days but I haven't looked into it…

Another ZeroTier user. Runs on few devices flawless.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#117
post #14

Unfortunately the cloudflared software, while the source is available on GitHub, and there are pull requests open and accepted for it, is not under an open source license, and the license it is under does not allow modifications, so any modifications (including the aformentioned pull requests) are contrary to the license and thus copyright law and thus illegal. The issue I filed about this is still waiting for action…

Hello from the Cloudflare team - thanks for the nudge. We're in the process of migrating away from the proprietary license to an Apache license. We'll update the GitHub issue too; should be wrapped up in the next couple of weeks but likely sooner.

As someone who watches this space closely and recommends Cloudflare Tunnel regularly, this is fantastic news.

Do you know if it will be feasible to add Cloudflare tunneling to 3rd party Golang apps?

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#118

You can get virtual server for $4/month. Installing proprietary software and registering to some service, that may "upgrade" to premium tier anytime, is pretty off-putting.

You can build a physical server for $500 once. Relying on proprietary hardware and registering to some service, that may "upgrade" to premium tier anytime, is pretty off-putting.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#119
post #9

Can we stop posting stuff that makes even more people give the keys of their house to the BigCorp cartel?

Why is it always the free software people who are the most judgemental about what I do with my software and who I trust with my time and money? AWS and Microsoft never gave a shit about what other vendors I'm in bed with.

I like your GNU license, I do not like your GNU license people.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#120
post #90

Earlier quoted context omitted.

Managing expectations re:v2 is not going well for me. I wasn't really aware WireGuard-ish crypto improvements were happening (hire the personalities™ freelance ASAP or at least for review), and timeline is basically a punchline at this point... I recommend just owning both (edit: start today!) as 'when it's finished' on the front page if you want to appeal to techs. I updated re:free, thanks. Their appear to be two (…

Managing expectations re:v2 has been a total failure on our part. We put far too many things in one basket. But the work is still happening. Learning moment for us: don't give timelines and don't reveal too much. Just say "when it's finished." Only Elon Musk can use Elon Time(tm). :) Edit: we also promised some things that are just brutally hard, like fully decentralizing the root backplane via full data set replicat…

FWIW your "decentralize until it hurts, then centralize until it works" is one of my favorite slogans, and I appreciate y'all making the effort.
Post reply on HN