Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SSH into private machines from anywhere using Cloudflare Tunnel

orth.uk

Post reply on HN
Print view View original

191–197 of 197 posts

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#191

Post by aaaaaaaaata »

freedomben wrote: post #178
lizknope wrote: post #114

Earlier quoted context omitted.

My virtual server is $1.67 a month (buyvm.net) My home firewall blocks all traffic except for incoming SSH from 3 IP addresses in the world. One of those is my virtual server. If I'm in a hotel with my laptop I run the first command to set up an SSH tunnel to my "home" computer through the cloud virtual server. That listens on my laptop to port 8888 and forwards it through the cloud virtual server to my home computer…

I do the same thing! I'm hoping that some day hotels won't send every wireguard packet they see straight to the bit bucket. Until then I'm really grateful for ssh.

No post body was provided.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#192

Post by taftster »

trinovantes wrote: post #183
taftster wrote: post #161

Earlier quoted context omitted.

ProxyJump is slightly preferred in modern SSH. Does what you're doing, but with simpler syntax. Take a look.

Thanks, I see that it's a fairly recent addition to OpenSSH I wrote that alias about a decade ago when it wasn't available for me yet

Yeah, it's a new parameter, based on exactly this common use case.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#193

Post by kellytrinh »

neurostimulant wrote: post #97
password4321 wrote: post #10

> Question: do you use a different tool which require no maintenance or cost to run? Answer: ZeroTier -- on Mac, Linux (home & cloud), Windows, Android I actually setup DNS entries resolving to private IPs as configured in ZeroTier so I didn't have to login to dig them up but my default DNS provider won't resolve them. I guess newer ZeroTier versions optionally have DNS covered these days but I haven't looked into it…

I also use ZeroTier for a few years now. Very useful. Unfortunately my current ISP use NAT instead of giving their subscribers routable ip address. This means ZeroTier reverts to using an external relay when accessing my machine from outside, which is very slow and has very high latency from my country. So in addition to ZeroTier, I use AutoSSH [1] to setup and maintain a persistent ssh tunnel on a high port on my vp…

Have you tried using Tailscale. It does similar to Zerotier and I would interested to know if their NAT workaround is better than ZT in your use case

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#194

Post by 72deluxe »

anderspitman wrote: post #162
philjohn wrote: post #158

Earlier quoted context omitted.

Wireguard needs an endpoint

If I understand GP correctly, the goal is to SSH into an RPi on a home network. Since they mention DDNS, it's implied that they're connecting directly to their home router. What I'm saying is why not port forward directly to the RPi?

Yes you are right. If just connecting to the Pi, port forwarding is fine (and I use this).

When adding more devices at home (IP cameras etc.) and not connecting just to the Pi then the Wireguard VPN comes in.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#195

Post by neurostimulant »

kellytrinh wrote: post #193
neurostimulant wrote: post #97

Earlier quoted context omitted.

I also use ZeroTier for a few years now. Very useful. Unfortunately my current ISP use NAT instead of giving their subscribers routable ip address. This means ZeroTier reverts to using an external relay when accessing my machine from outside, which is very slow and has very high latency from my country. So in addition to ZeroTier, I use AutoSSH [1] to setup and maintain a persistent ssh tunnel on a high port on my vp…

Have you tried using Tailscale. It does similar to Zerotier and I would interested to know if their NAT workaround is better than ZT in your use case

My issue with their zerotier was their slow relay server, which is only used when NAT hole punching doesn't work. I got this impression that zerotier doesn't really seem to be interested to invest more into their relay servers (adding more location and increasing capacity). Tailscale might has better relay servers but I haven't tested it yet, but I plan to test them later when I got some free time.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#196

Post by ric2b »

nexuist wrote: post #119
jdrc wrote: post #9

Can we stop posting stuff that makes even more people give the keys of their house to the BigCorp cartel?

Why is it always the free software people who are the most judgemental about what I do with my software and who I trust with my time and money? AWS and Microsoft never gave a shit about what other vendors I'm in bed with. I like your GNU license, I do not like your GNU license people.

The free software people care about your privacy, AWS and Microsoft don't.

They're not forcing you to do anything, just giving you advice.

Re: SSH into private machines from anywhere using Cloudflare Tunnel

#197

Post by jgrahamc »

jgrahamc wrote: post #84
mistrial9 wrote: post #81

Earlier quoted context omitted.

everyone believes that statement because?

Because in two weeks time if it's not done you can come back here and yell at me.

There you go: https://news.ycombinator.com/item?id=30353690
Post reply on HN