261
edits
VPN: Difference between revisions
Jump to navigation
Jump to search
no edit summary
(→Persistent SSH Tunnels: Updated article) |
No edit summary |
||
| Line 226: | Line 226: | ||
{{go to top}} | {{go to top}} | ||
=Persistent SSH Tunnels= | ==Persistent SSH Tunnels== | ||
The following is how to create a persistent SSH Tunnel between two systems. This is handy if you want to secure data flowing across networks, or even setup a tunnel without messing with VPN configuration. | The following is how to create a persistent SSH Tunnel between two systems. This is handy if you want to secure data flowing across networks, or even setup a tunnel without messing with VPN configuration. | ||
=Create User/Generate SSH key= | ===Create User/Generate SSH key=== | ||
First you will create the user you will use for the tunnel. This will allow you to forward non-privileged ports over 1024. | First you will create the user you will use for the tunnel. This will allow you to forward non-privileged ports over 1024. | ||
| Line 249: | Line 249: | ||
</pre> | </pre> | ||
=Copy public key to target system= | ===Copy public key to target system=== | ||
You will need to copy '''''id_rsa.pub''''' file from '''''/home/autossh/.ssh/''''' to the '''''authorized_keys''''' file on the remote system you want to connect to for the tunnel. | You will need to copy '''''id_rsa.pub''''' file from '''''/home/autossh/.ssh/''''' to the '''''authorized_keys''''' file on the remote system you want to connect to for the tunnel. | ||
''Note: It is recommended that you also create a normal user on the remote system and not use root.'' | ''Note: It is recommended that you also create a normal user on the remote system and not use root.'' | ||
=Install autossh= | ===Install autossh=== | ||
You will need to install the autossh program on the system that will initiate the SSH tunnel. Autossh automatically restarts the SSH tunnel when it exits. | You will need to install the autossh program on the system that will initiate the SSH tunnel. Autossh automatically restarts the SSH tunnel when it exits. | ||
<pre> | <pre> | ||
| Line 260: | Line 260: | ||
</pre> | </pre> | ||
=Setup script= | ===Setup script=== | ||
Copy the following script, making the necessary changes as specified between the <> and place on the system that will initiate the tunnel (here we will save it as /opt/ssh-tunnel.sh): | Copy the following script, making the necessary changes as specified between the <> and place on the system that will initiate the tunnel (here we will save it as /opt/ssh-tunnel.sh): | ||
<pre> | <pre> | ||
| Line 294: | Line 294: | ||
You can also use -L to change the direction of the port forwarding from Remote to Local and have the initiating system forward data over the tunnel the the remote. | You can also use -L to change the direction of the port forwarding from Remote to Local and have the initiating system forward data over the tunnel the the remote. | ||
=Make script executable= | ===Make script executable=== | ||
Make sure you mark the script as executable with: | Make sure you mark the script as executable with: | ||
| Line 300: | Line 300: | ||
chmod +x /opt/ssh-tunnel.sh | chmod +x /opt/ssh-tunnel.sh | ||
</pre> | </pre> | ||
=Tunnel at startup= | ===Tunnel at startup=== | ||
To have the tunnel up when the system restarts, choose one of the following methods | To have the tunnel up when the system restarts, choose one of the following methods | ||
==rc.local== | ====rc.local==== | ||
Add a line to /etc/rc.local that calls the script. | Add a line to /etc/rc.local that calls the script. | ||
| Line 312: | Line 312: | ||
''Note: You may have to enable rc.local on Ubuntu and Debian based systems via systemd. Refer to your distributions documentation for information on how to enable it.'' | ''Note: You may have to enable rc.local on Ubuntu and Debian based systems via systemd. Refer to your distributions documentation for information on how to enable it.'' | ||
==systemd== | ====systemd==== | ||
To have the script start at boot with systemd, create the following file and add it to /etc/systemd/system/ssh-tunnel.service | To have the script start at boot with systemd, create the following file and add it to /etc/systemd/system/ssh-tunnel.service | ||
===ssh-tunnel.service=== | =====ssh-tunnel.service===== | ||
<pre> | <pre> | ||
[Unit] | [Unit] | ||
| Line 328: | Line 328: | ||
</pre> | </pre> | ||
===Enable service=== | =====Enable service===== | ||
To enable the service to run via systemd run: | To enable the service to run via systemd run: | ||
<pre> | <pre> | ||