Protecting sshd using spiped

Re:Protecting sshd using spiped by tezza on Thursday August 30, 2012 @08:25AM (#4454223)

This looks incredibly useful, thanks.

I'd been kinda using two methods to do this already

  * OpenVPN plus tun firewalling
  * stunnel

Your solution is just so much a better fit for small-scale ( socket level protection ), it hurts.

How ready-for-production is the toolset ?

[ Parent | on HN ]

Re:Protecting sshd using spiped by cperciva on Thursday August 30, 2012 @08:34AM (#4454263)

Yeah, there's several ways to do this -- 'ssh -L' is probably the most common, followed by stunnel, followed by various types of VPN -- but for the use cases I care about none of them fit very well.

How ready-for-production is the toolset?

I've been using spiped in production for the past year. I've been using spipe for about two days (since I only wrote it two days ago). I'd characterize both as being very production-ready; the amount of code is small enough (about 4000 lines of code, of which 3/4 is library code shared with other projects I've released) that there's very little room for bugs to hide.

[ Parent | on HN ]