Hacker News Reader

Comment by X-Istence | Hacker News Reader

The -t creates a terminal on the remote host, so in essence it is the same as SSH'ing to machineB and then running the ssh command.

Even cooler is the use of SSH tunneling to set up a ProxyCommand.

View on HN

To expand on this, the reason why it’s “even cooler” is because you can use keys to login (as opposed to password) without forwarding your ssh-agent (which is a security risk).

I wrote more about this technique at https://michael.stapelberg.de/Artikel/ssh-conditional-tunnel...

In a nutshell:

    Host home
        Hostname home.zekjur.net
        ProxyCommand ssh -4 dualstack -W %h:%p

Then, “ssh home” will log into “home.zekjur.net” via an IPv4 connection through “dualstack”. This is useful in environments where you don’t have IPv6 and your only use-case is SSH'ing home.

Reply on news.ycombinator.com