PitchHut logo
gotun
Effortless access to internal networks via SSH tunneling.
Pitch

gotun is a lightweight command-line HTTP-over-SSH proxy that enables secure network requests to be made from a remote host. Ideal for accessing private resources and enhancing connectivity through a stable SSH tunnel, it's simple to deploy and cross-platform, making it a versatile tool for developers and network administrators.

Description

gotun is a lightweight command-line tool that provides an HTTP-over-SSH proxy, enabling secure access to private network resources through a remote host. By establishing an SSH connection, it transparently tunnels HTTP(S) traffic, allowing local requests to be executed from the remote server's network environment.

Key Features

  • No additional software required on the remote host beyond SSH.
  • Full traffic encryption through an SSH tunnel, ensuring secure data transmission.
  • Single and multi-hop support for SSH jump hosts, making it adaptable to complex network architectures.
  • Cross-platform compatibility with support for Windows, Linux, and macOS.
  • Rule-based traffic routing through a customizable configuration file, allowing for refined control over network traffic.
  • Automatic system proxy configuration simplifies setup for users, with the option to bypass if desired.
  • Extensive logging and debugging capabilities, with structured output for visibility into operations.

Typical Usage Scenarios

  1. Accessing internal resources: Use gotun to connect to internal servers or APIs through a bastion host. This is ideal for situations where direct access is restricted due to firewall settings.

    gotun user@bastion-host.com
    

    After establishing the proxy, HTTP requests can be made to internal services as if they are local.

  2. Development and debugging: For developers needing to access remote environments, gotun can be configured with verbose logging for troubleshooting.

    gotun --listen :8888 -v developer@dev-host.com
    

    Configure local development tools to use the specified local proxy address.

  3. Using a remote server for outbound traffic: Redirect all HTTP(S) requests through a remote server to leverage its network access, enhancing security and anonymity.

    gotun user@remote-proxy.com
    

Command-line Options

FlagDescriptionDefault
--listenLocal HTTP proxy bind address:8080
--portSSH server port22
--identity_filePrivate key file path for authentication
--jumpComma-separated list of jump hosts
--verboseEnable verbose loggingfalse
--sys-proxyEnable automatic system proxy configurationtrue
--rulesPath to routing rules configuration file

Conclusion

gotun simplifies secure networking through SSH, providing users with an efficient way to access remote services and resources while maintaining data integrity and confidentiality. Whether for development, administrative tasks, or secure internet access, gotun stands as a versatile solution.

0 comments

No comments yet.

Sign in to be the first to comment.