Hacker News Reader

Comment by fimdomeio | Hacker News Reader

a while ago I found out that you could do this by running a tor hidden service on the device. If I needed it, I think I'd rather use that, or a reverse tunnel than going through a third party.

View on HN

I feel the same way about depending on, and routing my traffic through third-party services.

I've recently developed a utility[0] to help simplify setting up hidden services w/client auth for this purpose, you might find interesting.

[0] https://github.com/cmars/ormesh

Can you explain a little bit more how do you do this?

I don’t know much but a little googling reveals this: https://nurdletech.com/linux-notes/ssh/hidden-service.html

After the HN comment on this a few weeks ago I implemented the Tor ssh method. The bottom of this script is what I run on my remote servers to get Tor ssh access, if want to see an example of working code - https://github.com/riazarbi/serversetup/blob/master/remote_d...

If you don't want the anonymity benefits, you can change the hops from 3 to 1 (from the client) to improve latency.

There's also a server (hidden service) option to disable anonymity. Use with caution, of course.

via tor: https://nurdletech.com/linux-notes/ssh/hidden-service.html

via reverse proxy: `ssh -NT -R 1234:localhost:22 youruser@yourmachine.com` Now if you connect to youruser@yourmachine.com you can then ssh to your inaccessible machine with `ssh inaccessibleuser@inaccessiblemachine:1234 `

Reply on news.ycombinator.com