gotun

gotun is a lightweight command-line tool that provides an HTTP-over-SSH proxy, enabling secure access to private network resources through a remote host. By establishing an SSH connection, it transparently tunnels HTTP(S) traffic, allowing local requests to be executed from the remote server's network environment.

Key Features

• No additional software required on the remote host beyond SSH.
• Full traffic encryption through an SSH tunnel, ensuring secure data transmission.
• Single and multi-hop support for SSH jump hosts, making it adaptable to complex network architectures.
• Cross-platform compatibility with support for Windows, Linux, and macOS.
• Rule-based traffic routing through a customizable configuration file, allowing for refined control over network traffic.
• Automatic system proxy configuration simplifies setup for users, with the option to bypass if desired.
• Extensive logging and debugging capabilities, with structured output for visibility into operations.

Typical Usage Scenarios

1. Accessing internal resources: Use gotun to connect to internal servers or APIs through a bastion host. This is ideal for situations where direct access is restricted due to firewall settings.

   gotun user@bastion-host.com
   

   After establishing the proxy, HTTP requests can be made to internal services as if they are local.

2. Development and debugging: For developers needing to access remote environments, gotun can be configured with verbose logging for troubleshooting.

   gotun --listen :8888 -v developer@dev-host.com
   

   Configure local development tools to use the specified local proxy address.

3. Using a remote server for outbound traffic: Redirect all HTTP(S) requests through a remote server to leverage its network access, enhancing security and anonymity.

   gotun user@remote-proxy.com
   

Command-line Options

Flag	Description	Default
--listen	Local HTTP proxy bind address	:8080
--port	SSH server port	22
--identity_file	Private key file path for authentication
--jump	Comma-separated list of jump hosts
--verbose	Enable verbose logging	false
--sys-proxy	Enable automatic system proxy configuration	true
--rules	Path to routing rules configuration file

Conclusion

gotun simplifies secure networking through SSH, providing users with an efficient way to access remote services and resources while maintaining data integrity and confidentiality. Whether for development, administrative tasks, or secure internet access, gotun stands as a versatile solution.