Hacker News Reader

Comment by Moral_ | Hacker News Reader

You can do this with screen/tmux too...no need to connect to some server where you can't audit their code.

If both machines aren't separated by NAT, you could. Except you'd need to either share you local password or an SSH key with another party, which is pretty inconvenient.

But most of the time you can't directly SSH into your laptop at home because it's behind NAT, so you need an SSH bastion, and we figured it's not expensive to host, why not put one out there for free.

And the code is all on github. Teleport (https://github.com/gravitational/teleport) is the server/proxy part.

https://samy.pl/pwnat/

That's really cool, can't wait to play with it, thanks!

Are there people with SSH running on their laptop at home who haven't set up port forwarding?

It's the first thing I do when setting up a new router.

I also like having a public IP on my desktop (and laptop) at work.

That would be me. I have openvpn setup everywhere, and I would hate to have a public IP on a computer on which I work. Sooner or later I would forget about adding some iptables for redis, database or dev applications that I'm running.

I mean in theory that would be just a few simple firewall rules that I wouldn't need to change, but on long enough time I would screw something up exposing myself, so the more layers the better.

There is a firewall between the work network and the outside world. You'd need to ask the sysadmin (me) to open a port.

Only a couple of developers use it, and only to run Apache or similar.

I used to, but ZetoTier[0] has made that a thing of the past. Now, no matter where I am or what sort of connection I have, it's like I have all my devices (and a few other people's) on a local LAN. I use it all the time to SSH into my laptop from my phone when I leave it someplace. I really can't recommend it highly enough.

[0]: https://www.zerotier.com

You could have an overlay network to give full visibility between hosts avoiding NAT completely. Also, inside the overlay network the IP addresses do not necessarily change, as opposed to the public IP address of your laptop when you move it somewhere else :-)

I work on an overlay network solution called Wormhole: http://wormhole.network

Reply on news.ycombinator.com