gotun - Effortless access to internal networks via SSH tunneling.

gotun

Effortless access to internal networks via SSH tunneling.

Pitch

gotun is a lightweight command-line HTTP-over-SSH proxy that enables secure network requests to be made from a remote host. Ideal for accessing private resources and enhancing connectivity through a stable SSH tunnel, it's simple to deploy and cross-platform, making it a versatile tool for developers and network administrators.

Description

gotun is a lightweight command-line tool that provides an HTTP-over-SSH proxy, enabling secure access to private network resources through a remote host. By establishing an SSH connection, it transparently tunnels HTTP(S) traffic, allowing local requests to be executed from the remote server's network environment.

Key Features

No additional software required on the remote host beyond SSH.
Full traffic encryption through an SSH tunnel, ensuring secure data transmission.
Single and multi-hop support for SSH jump hosts, making it adaptable to complex network architectures.
Cross-platform compatibility with support for Windows, Linux, and macOS.
Rule-based traffic routing through a customizable configuration file, allowing for refined control over network traffic.
Automatic system proxy configuration simplifies setup for users, with the option to bypass if desired.
Extensive logging and debugging capabilities, with structured output for visibility into operations.

Typical Usage Scenarios

Accessing internal resources: Use gotun to connect to internal servers or APIs through a bastion host. This is ideal for situations where direct access is restricted due to firewall settings.
```
gotun user@bastion-host.com
```
After establishing the proxy, HTTP requests can be made to internal services as if they are local.
Development and debugging: For developers needing to access remote environments, gotun can be configured with verbose logging for troubleshooting.
```
gotun --listen :8888 -v developer@dev-host.com
```
Configure local development tools to use the specified local proxy address.
Using a remote server for outbound traffic: Redirect all HTTP(S) requests through a remote server to leverage its network access, enhancing security and anonymity.
```
gotun user@remote-proxy.com
```

Command-line Options

Flag	Description	Default
`--listen`	Local HTTP proxy bind address	`:8080`
`--port`	SSH server port	`22`
`--identity_file`	Private key file path for authentication
`--jump`	Comma-separated list of jump hosts
`--verbose`	Enable verbose logging	`false`
`--sys-proxy`	Enable automatic system proxy configuration	`true`
`--rules`	Path to routing rules configuration file

Conclusion

gotun simplifies secure networking through SSH, providing users with an efficient way to access remote services and resources while maintaining data integrity and confidentiality. Whether for development, administrative tasks, or secure internet access, gotun stands as a versatile solution.

0 comments

No comments yet.

New comment