Making a SSH VPN [on hold]












1















So by using ssh you will connect to a server by typing in ssh User@PrivateIP how would it be possible to turn that code into a piece of code that works like a VPN (so searching for example google from a different geolocation). FYI: By connecting I mean that you connect to a computer of your own and not a supplied VPN server.










share|improve this question















put on hold as unclear what you're asking by user68186, Charles Green, Pilot6, K7AAY, Eric Carvalho yesterday


Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.














  • 1





    Do you mean you want to run a socks proxy server at your home desktop and connect to it from your laptop when traveling?

    – user68186
    2 days ago











  • You are looking for SSH Tunneling. Otherwise you can setup VPN via ordinary VPN server.

    – kukulo
    2 days ago











  • I don't know if you're looking for something like this: How to build your own VPN ...

    – glenn jackman
    2 days ago
















1















So by using ssh you will connect to a server by typing in ssh User@PrivateIP how would it be possible to turn that code into a piece of code that works like a VPN (so searching for example google from a different geolocation). FYI: By connecting I mean that you connect to a computer of your own and not a supplied VPN server.










share|improve this question















put on hold as unclear what you're asking by user68186, Charles Green, Pilot6, K7AAY, Eric Carvalho yesterday


Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.














  • 1





    Do you mean you want to run a socks proxy server at your home desktop and connect to it from your laptop when traveling?

    – user68186
    2 days ago











  • You are looking for SSH Tunneling. Otherwise you can setup VPN via ordinary VPN server.

    – kukulo
    2 days ago











  • I don't know if you're looking for something like this: How to build your own VPN ...

    – glenn jackman
    2 days ago














1












1








1








So by using ssh you will connect to a server by typing in ssh User@PrivateIP how would it be possible to turn that code into a piece of code that works like a VPN (so searching for example google from a different geolocation). FYI: By connecting I mean that you connect to a computer of your own and not a supplied VPN server.










share|improve this question
















So by using ssh you will connect to a server by typing in ssh User@PrivateIP how would it be possible to turn that code into a piece of code that works like a VPN (so searching for example google from a different geolocation). FYI: By connecting I mean that you connect to a computer of your own and not a supplied VPN server.







command-line ssh vpn proxy






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited yesterday









pa4080

14k52564




14k52564










asked 2 days ago









ijndkgeoijndkgeo

133




133




put on hold as unclear what you're asking by user68186, Charles Green, Pilot6, K7AAY, Eric Carvalho yesterday


Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.









put on hold as unclear what you're asking by user68186, Charles Green, Pilot6, K7AAY, Eric Carvalho yesterday


Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.










  • 1





    Do you mean you want to run a socks proxy server at your home desktop and connect to it from your laptop when traveling?

    – user68186
    2 days ago











  • You are looking for SSH Tunneling. Otherwise you can setup VPN via ordinary VPN server.

    – kukulo
    2 days ago











  • I don't know if you're looking for something like this: How to build your own VPN ...

    – glenn jackman
    2 days ago














  • 1





    Do you mean you want to run a socks proxy server at your home desktop and connect to it from your laptop when traveling?

    – user68186
    2 days ago











  • You are looking for SSH Tunneling. Otherwise you can setup VPN via ordinary VPN server.

    – kukulo
    2 days ago











  • I don't know if you're looking for something like this: How to build your own VPN ...

    – glenn jackman
    2 days ago








1




1





Do you mean you want to run a socks proxy server at your home desktop and connect to it from your laptop when traveling?

– user68186
2 days ago





Do you mean you want to run a socks proxy server at your home desktop and connect to it from your laptop when traveling?

– user68186
2 days ago













You are looking for SSH Tunneling. Otherwise you can setup VPN via ordinary VPN server.

– kukulo
2 days ago





You are looking for SSH Tunneling. Otherwise you can setup VPN via ordinary VPN server.

– kukulo
2 days ago













I don't know if you're looking for something like this: How to build your own VPN ...

– glenn jackman
2 days ago





I don't know if you're looking for something like this: How to build your own VPN ...

– glenn jackman
2 days ago










1 Answer
1






active

oldest

votes


















0














It's not exactly VPN, but could be enough in the most cases. You can create ssh connection with dynamic port forwarding to create socks proxy:



ssh -D 9050 user@sshserver -fTNC



  • -D [bind_address:]port Specifies a local “dynamic” application-level port forwarding... Whenever a connection is made to this port, the connection is forwarded over the secure channel, and the application protocol is then used to determine where to connect to from the remote machine. Currently the SOCKS4 and SOCKS5 protocols are supported... read more at man ssh.


  • The options -fTNC will enable the compression and will push the connection in the background.


  • Optionally use autossh instead of ssh.



The rest you need to do is to tell your applications to use localhost:9050 as socks proxy. Here are few references dedicated to this task:




  • Systemwide proxy settings in ubuntu or How to on Ubuntu 18.04


  • Set Ubuntu System Proxy Settings without Restart from command-line


  • How To Route Web Traffic Securely Without a VPN Using a SOCKS Tunnel


  • Setting up Proxy in Ubuntu


  • For any other special requirements probably iptables rules can be applied.





Another solution that is more close to VPN is sshuttle, which works over ssh too. Here is its overview:




sshuttle: where transparent proxy meets VPN meets ssh



As far as I know, sshuttle is the only program that solves the following common case:




  • Your client machine (or router) is Linux, FreeBSD, or MacOS.

  • You have access to a remote network via ssh.

  • You don't necessarily have admin access on the remote network.

  • The remote network has no VPN, or only stupid/complex VPN protocols (IPsec, PPTP, etc). Or maybe you are the admin and you just got
    frustrated with the awful state of VPN tools.

  • You don't want to create an ssh port forward for every single host/port on the remote network.

  • You hate openssh's port forwarding because it's randomly slow and/or stupid.

  • You can't use openssh's PermitTunnel feature because it's disabled by default on openssh servers; plus it does TCP-over-TCP, which has
    terrible performance (see below).




It is available in Ubuntu repository, so you can install it and start your examination by the command:



sudo apt install sshuttle


It is also possible to install into a virtualenv as a non-root user. Once it is installed you can use:



 sshuttle --dns -r user@sshserver 0.0.0.0/0


This command will forward all traffic including DNS queries will be proxied through the DNS server of the server you are connect to.






share|improve this answer
































    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    It's not exactly VPN, but could be enough in the most cases. You can create ssh connection with dynamic port forwarding to create socks proxy:



    ssh -D 9050 user@sshserver -fTNC



    • -D [bind_address:]port Specifies a local “dynamic” application-level port forwarding... Whenever a connection is made to this port, the connection is forwarded over the secure channel, and the application protocol is then used to determine where to connect to from the remote machine. Currently the SOCKS4 and SOCKS5 protocols are supported... read more at man ssh.


    • The options -fTNC will enable the compression and will push the connection in the background.


    • Optionally use autossh instead of ssh.



    The rest you need to do is to tell your applications to use localhost:9050 as socks proxy. Here are few references dedicated to this task:




    • Systemwide proxy settings in ubuntu or How to on Ubuntu 18.04


    • Set Ubuntu System Proxy Settings without Restart from command-line


    • How To Route Web Traffic Securely Without a VPN Using a SOCKS Tunnel


    • Setting up Proxy in Ubuntu


    • For any other special requirements probably iptables rules can be applied.





    Another solution that is more close to VPN is sshuttle, which works over ssh too. Here is its overview:




    sshuttle: where transparent proxy meets VPN meets ssh



    As far as I know, sshuttle is the only program that solves the following common case:




    • Your client machine (or router) is Linux, FreeBSD, or MacOS.

    • You have access to a remote network via ssh.

    • You don't necessarily have admin access on the remote network.

    • The remote network has no VPN, or only stupid/complex VPN protocols (IPsec, PPTP, etc). Or maybe you are the admin and you just got
      frustrated with the awful state of VPN tools.

    • You don't want to create an ssh port forward for every single host/port on the remote network.

    • You hate openssh's port forwarding because it's randomly slow and/or stupid.

    • You can't use openssh's PermitTunnel feature because it's disabled by default on openssh servers; plus it does TCP-over-TCP, which has
      terrible performance (see below).




    It is available in Ubuntu repository, so you can install it and start your examination by the command:



    sudo apt install sshuttle


    It is also possible to install into a virtualenv as a non-root user. Once it is installed you can use:



     sshuttle --dns -r user@sshserver 0.0.0.0/0


    This command will forward all traffic including DNS queries will be proxied through the DNS server of the server you are connect to.






    share|improve this answer






























      0














      It's not exactly VPN, but could be enough in the most cases. You can create ssh connection with dynamic port forwarding to create socks proxy:



      ssh -D 9050 user@sshserver -fTNC



      • -D [bind_address:]port Specifies a local “dynamic” application-level port forwarding... Whenever a connection is made to this port, the connection is forwarded over the secure channel, and the application protocol is then used to determine where to connect to from the remote machine. Currently the SOCKS4 and SOCKS5 protocols are supported... read more at man ssh.


      • The options -fTNC will enable the compression and will push the connection in the background.


      • Optionally use autossh instead of ssh.



      The rest you need to do is to tell your applications to use localhost:9050 as socks proxy. Here are few references dedicated to this task:




      • Systemwide proxy settings in ubuntu or How to on Ubuntu 18.04


      • Set Ubuntu System Proxy Settings without Restart from command-line


      • How To Route Web Traffic Securely Without a VPN Using a SOCKS Tunnel


      • Setting up Proxy in Ubuntu


      • For any other special requirements probably iptables rules can be applied.





      Another solution that is more close to VPN is sshuttle, which works over ssh too. Here is its overview:




      sshuttle: where transparent proxy meets VPN meets ssh



      As far as I know, sshuttle is the only program that solves the following common case:




      • Your client machine (or router) is Linux, FreeBSD, or MacOS.

      • You have access to a remote network via ssh.

      • You don't necessarily have admin access on the remote network.

      • The remote network has no VPN, or only stupid/complex VPN protocols (IPsec, PPTP, etc). Or maybe you are the admin and you just got
        frustrated with the awful state of VPN tools.

      • You don't want to create an ssh port forward for every single host/port on the remote network.

      • You hate openssh's port forwarding because it's randomly slow and/or stupid.

      • You can't use openssh's PermitTunnel feature because it's disabled by default on openssh servers; plus it does TCP-over-TCP, which has
        terrible performance (see below).




      It is available in Ubuntu repository, so you can install it and start your examination by the command:



      sudo apt install sshuttle


      It is also possible to install into a virtualenv as a non-root user. Once it is installed you can use:



       sshuttle --dns -r user@sshserver 0.0.0.0/0


      This command will forward all traffic including DNS queries will be proxied through the DNS server of the server you are connect to.






      share|improve this answer




























        0












        0








        0







        It's not exactly VPN, but could be enough in the most cases. You can create ssh connection with dynamic port forwarding to create socks proxy:



        ssh -D 9050 user@sshserver -fTNC



        • -D [bind_address:]port Specifies a local “dynamic” application-level port forwarding... Whenever a connection is made to this port, the connection is forwarded over the secure channel, and the application protocol is then used to determine where to connect to from the remote machine. Currently the SOCKS4 and SOCKS5 protocols are supported... read more at man ssh.


        • The options -fTNC will enable the compression and will push the connection in the background.


        • Optionally use autossh instead of ssh.



        The rest you need to do is to tell your applications to use localhost:9050 as socks proxy. Here are few references dedicated to this task:




        • Systemwide proxy settings in ubuntu or How to on Ubuntu 18.04


        • Set Ubuntu System Proxy Settings without Restart from command-line


        • How To Route Web Traffic Securely Without a VPN Using a SOCKS Tunnel


        • Setting up Proxy in Ubuntu


        • For any other special requirements probably iptables rules can be applied.





        Another solution that is more close to VPN is sshuttle, which works over ssh too. Here is its overview:




        sshuttle: where transparent proxy meets VPN meets ssh



        As far as I know, sshuttle is the only program that solves the following common case:




        • Your client machine (or router) is Linux, FreeBSD, or MacOS.

        • You have access to a remote network via ssh.

        • You don't necessarily have admin access on the remote network.

        • The remote network has no VPN, or only stupid/complex VPN protocols (IPsec, PPTP, etc). Or maybe you are the admin and you just got
          frustrated with the awful state of VPN tools.

        • You don't want to create an ssh port forward for every single host/port on the remote network.

        • You hate openssh's port forwarding because it's randomly slow and/or stupid.

        • You can't use openssh's PermitTunnel feature because it's disabled by default on openssh servers; plus it does TCP-over-TCP, which has
          terrible performance (see below).




        It is available in Ubuntu repository, so you can install it and start your examination by the command:



        sudo apt install sshuttle


        It is also possible to install into a virtualenv as a non-root user. Once it is installed you can use:



         sshuttle --dns -r user@sshserver 0.0.0.0/0


        This command will forward all traffic including DNS queries will be proxied through the DNS server of the server you are connect to.






        share|improve this answer















        It's not exactly VPN, but could be enough in the most cases. You can create ssh connection with dynamic port forwarding to create socks proxy:



        ssh -D 9050 user@sshserver -fTNC



        • -D [bind_address:]port Specifies a local “dynamic” application-level port forwarding... Whenever a connection is made to this port, the connection is forwarded over the secure channel, and the application protocol is then used to determine where to connect to from the remote machine. Currently the SOCKS4 and SOCKS5 protocols are supported... read more at man ssh.


        • The options -fTNC will enable the compression and will push the connection in the background.


        • Optionally use autossh instead of ssh.



        The rest you need to do is to tell your applications to use localhost:9050 as socks proxy. Here are few references dedicated to this task:




        • Systemwide proxy settings in ubuntu or How to on Ubuntu 18.04


        • Set Ubuntu System Proxy Settings without Restart from command-line


        • How To Route Web Traffic Securely Without a VPN Using a SOCKS Tunnel


        • Setting up Proxy in Ubuntu


        • For any other special requirements probably iptables rules can be applied.





        Another solution that is more close to VPN is sshuttle, which works over ssh too. Here is its overview:




        sshuttle: where transparent proxy meets VPN meets ssh



        As far as I know, sshuttle is the only program that solves the following common case:




        • Your client machine (or router) is Linux, FreeBSD, or MacOS.

        • You have access to a remote network via ssh.

        • You don't necessarily have admin access on the remote network.

        • The remote network has no VPN, or only stupid/complex VPN protocols (IPsec, PPTP, etc). Or maybe you are the admin and you just got
          frustrated with the awful state of VPN tools.

        • You don't want to create an ssh port forward for every single host/port on the remote network.

        • You hate openssh's port forwarding because it's randomly slow and/or stupid.

        • You can't use openssh's PermitTunnel feature because it's disabled by default on openssh servers; plus it does TCP-over-TCP, which has
          terrible performance (see below).




        It is available in Ubuntu repository, so you can install it and start your examination by the command:



        sudo apt install sshuttle


        It is also possible to install into a virtualenv as a non-root user. Once it is installed you can use:



         sshuttle --dns -r user@sshserver 0.0.0.0/0


        This command will forward all traffic including DNS queries will be proxied through the DNS server of the server you are connect to.







        share|improve this answer














        share|improve this answer



        share|improve this answer








        edited yesterday

























        answered 2 days ago









        pa4080pa4080

        14k52564




        14k52564















            Popular posts from this blog

            Category:香港粉麵

            List *all* the tuples!

            Channel [V]