bk99.de entertain the web since 1997

bk99.de
Hackaday · NetworksCurated

A small VPN replacement with SSH

Summary

Hackaday explains SSH tunnels and TUN devices that make remote networks securely reachable without an additional VPN service. The approach needs a reachable SSH server. Local and dynamic forwarding support different destinations.

Ideas

  • SSH encrypts the transport to the remote computer.
  • Port forwarding publishes individual remote services locally.
  • TUN devices can route all IP traffic through the tunnel.

Insights

  • An existing secure access can take on several networking tasks.
  • An SSH tunnel stays simpler than a VPN but scales less well.

Recommendations

  • Restrict forwarding to the networks you need.
  • Use WireGuard for permanent multi-user VPNs.

References

Read the original article

Search the Web Archive

Hackaday · 2025

Cloudflare hits the limits of the Linux network stack

Hackaday describes Cloudflare’s attempt to redirect TCP connections for soft unicast and why a simple local proxy ultimately proved more robust. Cloudflare uses anycast extensively for its services. TCP_REPAIR is normally used to migrate connections.

g · 2015

O2 tests roaming with the E-Plus network

In January 2015 O2 tested national roaming with the network of E-Plus, which had belonged to Telefónica since October 2014. Registered customers in the Gummersbach, Siegen and Altenkirchen area could use the E-Plus UMTS network, where O2’s coverage was poorer. LTE was explicitly excluded.