You are not logged in.
Hi everyone, I've been trying to create a layer-3 ssh tunnel between my local gateway server, and an offsite server, with which I will route all my traffic through so my ISP can't do anything evil... I am able to do this using a command such as:
ssh -f -N -w0:0 <serverip>This approach automatically creates a tunnel device on both computers, but requires me to send down a script as part of the ssh authorization to set an IP address for the tunnel device on the remote server. While this works, it's rather clunky for a static setup IMO. I'd like to come up with something a bit more permanent. Does rc.conf support tunnel devices?
In Debian I would accomplish this by editing /etc/networks/interfaces and adding:
iface tun0 inet static
address 10.0.0.1
netmask 255.255.255.0
pointopoint 10.0.0.2 #client-side tunnel addressNote that this is not a port-forwarding tcp connection. It is a layer-3 tunnel that is independent of any protocol.
Thanks!
Offline
It seems like netcfg has support for this kind of thing, by looking at the examples (/etc/network.d/examples/tuntap). I've never tried it though.
Offline
Thanks for the suggestion of netcfg. I did a little searching on netcfg and tun devices, and came across this:
https://bugs.archlinux.org/task/15049
Apparently I'm not the only one that wants this support. It looks like they did end up adding support to netcfg to handle virtual devices, but I think that was a rather poor choice now that I know what netcfg is. To me, netcfg is more of a NetworkManager alternative - useful for roaming laptops.
I love Arch, and have used it for years on my workstations, but if I have to install a NetworkManager-like program in order to configure a persistent virtual device, I think I will reinstall my server with something better suited for a server.
Thanks!
Offline