ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Trading a VPN for an SSH Tunnel

    Scheduled Pinned Locked Moved IT Discussion
    ssh tunnelsshvnc
    23 Posts 9 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • travisdh1T
      travisdh1 @scottalanmiller
      last edited by

      @scottalanmiller said in Trading a VPN for an SSH Tunnel:

      Poor man's VPN is ZeroTier where there is literally nothing to pay for or run. Just choose it and voila.

      This.

      1 Reply Last reply Reply Quote 0
      • NerdyDadN
        NerdyDad
        last edited by

        Already have a network setup. Now have to deploy clients.

        1 Reply Last reply Reply Quote 0
        • J
          JasGot
          last edited by

          Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.

          Or a Ubiquiti Edge Router Lite will work too, just more expensive.

          I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

          73 old man.

          scottalanmillerS 1 Reply Last reply Reply Quote 0
          • scottalanmillerS
            scottalanmiller @JasGot
            last edited by

            @JasGot said in Trading a VPN for an SSH Tunnel:

            Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
            Or a Ubiquiti Edge Router Lite will work too, just more expensive.
            I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

            All more work and more money than easy and free.

            JaredBuschJ J 2 Replies Last reply Reply Quote 0
            • JaredBuschJ
              JaredBusch @scottalanmiller
              last edited by

              @scottalanmiller said in Trading a VPN for an SSH Tunnel:

              @JasGot said in Trading a VPN for an SSH Tunnel:

              Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
              Or a Ubiquiti Edge Router Lite will work too, just more expensive.
              I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

              All more work and more money than easy and free.

              And a fully open virus network. ZT is at least limited tot he devices it is on.

              J 1 Reply Last reply Reply Quote 1
              • jt1001001J
                jt1001001
                last edited by

                Watching this; looking to do the same thing to remote access a computer radio combo

                1 Reply Last reply Reply Quote 1
                • NerdyDadN
                  NerdyDad
                  last edited by

                  So, I went to ZeroTier and created myself a free account, created a network, and downloaded a client for my Windows 10 PC, the android app, and installed it on my Debian 9 Linux desktop. Authorized 3 clients onto the network. The network is private, so has to be authorized from the ZeroTier console before allowing communication between the device and the rest of the network.

                  image.png

                  Once I had 3 devices connected, I began testing communication between devices.

                  From Windows 10 to Debian 9:

                  via SSH
                  image(1).png

                  via VNC
                  VNC.png

                  So, I am able to remote into the computer by both SSH and VNC. However, I am not able to talk on the radio and hear what I receive while I am out and about. This is my next dilemma. How do I have the two-way audio between the ham-shack box and myself when I'm out and about?

                  travisdh1T 1 Reply Last reply Reply Quote 0
                  • travisdh1T
                    travisdh1 @NerdyDad
                    last edited by

                    @NerdyDad VNC should have the option to forward audio as well. Might be in the server or client setting tho, it's been a long time since I had a reason to go look at that.

                    NerdyDadN 1 Reply Last reply Reply Quote 1
                    • J
                      JasGot @scottalanmiller
                      last edited by

                      @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                      @JasGot said in Trading a VPN for an SSH Tunnel:

                      Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                      Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                      I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                      All more work and more money than easy and free.

                      Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                      NerdyDadN scottalanmillerS 2 Replies Last reply Reply Quote 0
                      • J
                        JasGot @JaredBusch
                        last edited by

                        @JaredBusch said in Trading a VPN for an SSH Tunnel:

                        And a fully open virus network. ZT is at least limited tot he devices it is on.

                        How so? My VPNs are locked to IP address and/or 2FA.

                        DashrenderD 1 Reply Last reply Reply Quote 0
                        • DashrenderD
                          Dashrender @JasGot
                          last edited by

                          @JasGot said in Trading a VPN for an SSH Tunnel:

                          @JaredBusch said in Trading a VPN for an SSH Tunnel:

                          And a fully open virus network. ZT is at least limited tot he devices it is on.

                          How so? My VPNs are locked to IP address and/or 2FA.

                          Once something gets onto any node - it can spread the virus to all other VPN nodes... the same applies to ZT, though JB's claim is that ZT won't likely be installed everywhere.

                          To JB's claim I say - so what? Once a multi-homed computer is infected, it can easily try to infect any other local computers, so... not really much of a saving grace there.

                          JaredBuschJ J 2 Replies Last reply Reply Quote 0
                          • NerdyDadN
                            NerdyDad @travisdh1
                            last edited by

                            @travisdh1 said in Trading a VPN for an SSH Tunnel:

                            @NerdyDad VNC should have the option to forward audio as well. Might be in the server or client setting tho, it's been a long time since I had a reason to go look at that.

                            I didn't see it in VNC, but maybe I am using the wrong VNC server (TightVNC vs UltraVNC). Can you send me some more information?

                            I also found crtmpserver that streams audio both ways and to Android devices. Maybe it will work instead? How hard would it be to setup?

                            1 Reply Last reply Reply Quote 0
                            • JaredBuschJ
                              JaredBusch @Dashrender
                              last edited by

                              @Dashrender said in Trading a VPN for an SSH Tunnel:

                              @JasGot said in Trading a VPN for an SSH Tunnel:

                              @JaredBusch said in Trading a VPN for an SSH Tunnel:

                              And a fully open virus network. ZT is at least limited tot he devices it is on.

                              How so? My VPNs are locked to IP address and/or 2FA.

                              Once something gets onto any node - it can spread the virus to all other VPN nodes... the same applies to ZT, though JB's claim is that ZT won't likely be installed everywhere.

                              To JB's claim I say - so what? Once a multi-homed computer is infected, it can easily try to infect any other local computers, so... not really much of a saving grace there.

                              Coorect not much of one but it is a smaller attack surface by a bit

                              1 Reply Last reply Reply Quote 0
                              • J
                                JasGot @Dashrender
                                last edited by

                                @Dashrender said in Trading a VPN for an SSH Tunnel:

                                Once something gets onto any node - it can spread the virus to all other VPN nodes...

                                True, hopefully gateway security suites will stop that.

                                scottalanmillerS 1 Reply Last reply Reply Quote 0
                                • scottalanmillerS
                                  scottalanmiller @JasGot
                                  last edited by

                                  @JasGot said in Trading a VPN for an SSH Tunnel:

                                  True, hopefully gateway security suites will stop that.

                                  VPNs bypass those things. At least in most cases. Gateway security is never really where you expect things to be stopped. It's the individual machines where you hope for the real defenses to be sitting. Whether it's because the LAN is breached in some other way, or a hole is punched by the VPN, Gateway security is too far from the main attack points and knows nothing about most attack vectors.

                                  1 Reply Last reply Reply Quote 1
                                  • NerdyDadN
                                    NerdyDad @JasGot
                                    last edited by

                                    @JasGot said in Trading a VPN for an SSH Tunnel:

                                    @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                    @JasGot said in Trading a VPN for an SSH Tunnel:

                                    Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                                    Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                                    I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                                    All more work and more money than easy and free.

                                    Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                                    $70 for what you are proposing with more hardware and equipment that could fail and I have to maintain in my house that my wife won't like because its more "junk" versus ZeroTier which is free, software only, and my wife won't have to see it.

                                    Hmmm....Decisions, decisions.

                                    jmooreJ 1 Reply Last reply Reply Quote 1
                                    • jmooreJ
                                      jmoore @NerdyDad
                                      last edited by

                                      @NerdyDad You mean there are actual decisions to that lol? ZT for the win

                                      1 Reply Last reply Reply Quote 0
                                      • scottalanmillerS
                                        scottalanmiller @JasGot
                                        last edited by

                                        @JasGot said in Trading a VPN for an SSH Tunnel:

                                        @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                        @JasGot said in Trading a VPN for an SSH Tunnel:

                                        Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                                        Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                                        I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                                        All more work and more money than easy and free.

                                        Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                                        Comparing to a bad decision is misleading. You have to throw money away today, and ignore better options, to them create the "savings" of spending money. That's a false decision matrix.

                                        The real comparison is against something free. That's the baseline to beat. Otherwise, nothing is costly compared to any contrived more expensive decision.

                                        Example: I want a laser light show for my house, I don't need it, I just want it. The free option is to not buy one. Buying one is normally $100. But I could find one that is $200 and then say that the $100 is "free" or even "saving me money." But this is false, it's still costing $100 no matter how many more expensive alternatives we find.

                                        It's like the 'sale' problem. The shirt was on sale for 50% off, I saved 50%!! No, you still bought a shirt you didn't need, money was lost versus the free baseline.

                                        JaredBuschJ stacksofplatesS 2 Replies Last reply Reply Quote 0
                                        • JaredBuschJ
                                          JaredBusch @scottalanmiller
                                          last edited by JaredBusch

                                          @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                          @JasGot said in Trading a VPN for an SSH Tunnel:

                                          @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                          @JasGot said in Trading a VPN for an SSH Tunnel:

                                          Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                                          Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                                          I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                                          All more work and more money than easy and free.

                                          Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                                          Comparing to a bad decision is misleading. You have to throw money away today, and ignore better options, to them create the "savings" of spending money. That's a false decision matrix.

                                          The real comparison is against something free. That's the baseline to beat. Otherwise, nothing is costly compared to any contrived more expensive decision.

                                          Example: I want a laser light show for my house, I don't need it, I just want it. The free option is to not buy one. Buying one is normally $100. But I could find one that is $200 and then say that the $100 is "free" or even "saving me money." But this is false, it's still costing $100 no matter how many more expensive alternatives we find.

                                          It's like the 'sale' problem. The shirt was on sale for 50% off, I saved 50%!! No, you still bought a shirt you didn't need, money was lost versus the free baseline.

                                          Except I need the shirt. No one wants to see me topless. I proved that back in January.

                                          1 Reply Last reply Reply Quote 4
                                          • jt1001001J
                                            jt1001001
                                            last edited by

                                            Oldish thread looks like you found a solution using ZeroTier. Has anyone done something similar using SoftEther VPN? I am looking at a SoftEther setup (not by me) trying to figure it out; looks likkey they have asome soft of cloud server and are bridging the VPN's to make a large network.

                                            1 Reply Last reply Reply Quote 0
                                            • 1
                                            • 2
                                            • 1 / 2
                                            • First post
                                              Last post