permanent ssh tunnel

LonelyStar · 2009-03-05 12:20:13

Hi,
To have a secure connection to an mysql database, I want to keep an permanent ssh tunnel from my laptop to my server open.

I wonder, what the best way to this would be!
Is there a general postup/post-reconnect function for the network in netfg2 config from which I could open the tunnel?
Has somebody else a better Idea?

Thanks!
Nathan

cactus · 2009-03-05 18:30:17

I have a few boxes where i start an ssh tunnel with daemontools, so it if dies for some reason, it will just come back up.

fukawi2 · 2009-03-05 22:04:33

LonelyStar wrote:

Has somebody else a better Idea?

I think they did... They called it 'VPN'

cactus · 2009-03-05 23:13:15

full vpn is a bit overkill if you are just wanting to tunnel one single port.

that said, I do "love me some openvpn". wewt wewt!

Last edited by cactus (2009-03-05 23:13:27)

LonelyStar · 2009-03-06 11:14:24

Hi,

Thanks, the deamon-tools, ssh tunnel is a good Idea!
I want to use it on a laptop wich does not always have an internet connection.
So I wonder, without a I-net connectin, ssh would permanently die (connect errors).
Do you have a trick for daemontools not to permanently restart ssh in such a case?
It has to somehow check if the i-net connection is up or so ...

R00KIE · 2009-03-06 13:46:50

You can start the ssh connection normally with ssh.
Then put something working (on the remote side) to keep the connection alive, for me this does the trick

watch -n 120 w

ckristi · 2009-03-06 15:33:06

Well.. and there's the "-N" option, too:

Excerpt from the ssh manual:

     -N      Do not execute a remote command.  This is useful for just for-
             warding ports (protocol version 2 only).

kcbanner · 2009-03-06 15:44:25

You can also set SSH to send a tcp keep-alive packet every X seconds. (ie ServerAliveInterval 200 in /etc/ssh/ssh_config )

LonelyStar · 2009-03-06 18:32:05

Hi,

OK, I need my ssh connection to keep alive. That makes sense, I did not even think about that.
But also, I not to start the "ssh daemon" only the network connection is up (or even better, my server is reachable).
How do I do that?

Thanks!
Nathan

Arch Linux

#1 2009-03-05 12:20:13

permanent ssh tunnel

#2 2009-03-05 18:30:17

Re: permanent ssh tunnel

#3 2009-03-05 22:04:33

Re: permanent ssh tunnel

#4 2009-03-05 23:13:15

Re: permanent ssh tunnel

#5 2009-03-06 11:14:24

Re: permanent ssh tunnel

#6 2009-03-06 13:46:50

Re: permanent ssh tunnel

#7 2009-03-06 15:33:06

Re: permanent ssh tunnel

#8 2009-03-06 15:44:25

Re: permanent ssh tunnel

#9 2009-03-06 18:32:05

Re: permanent ssh tunnel

Board footer