ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Trading a VPN for an SSH Tunnel

    IT Discussion
    ssh tunnel ssh vnc
    9
    23
    2.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      JasGot
      last edited by

      Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.

      Or a Ubiquiti Edge Router Lite will work too, just more expensive.

      I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

      73 old man.

      scottalanmillerS 1 Reply Last reply Reply Quote 0
      • scottalanmillerS
        scottalanmiller @JasGot
        last edited by

        @JasGot said in Trading a VPN for an SSH Tunnel:

        Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
        Or a Ubiquiti Edge Router Lite will work too, just more expensive.
        I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

        All more work and more money than easy and free.

        JaredBuschJ J 2 Replies Last reply Reply Quote 0
        • JaredBuschJ
          JaredBusch @scottalanmiller
          last edited by

          @scottalanmiller said in Trading a VPN for an SSH Tunnel:

          @JasGot said in Trading a VPN for an SSH Tunnel:

          Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
          Or a Ubiquiti Edge Router Lite will work too, just more expensive.
          I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

          All more work and more money than easy and free.

          And a fully open virus network. ZT is at least limited tot he devices it is on.

          J 1 Reply Last reply Reply Quote 1
          • jt1001001J
            jt1001001
            last edited by

            Watching this; looking to do the same thing to remote access a computer radio combo

            1 Reply Last reply Reply Quote 1
            • NerdyDadN
              NerdyDad
              last edited by

              So, I went to ZeroTier and created myself a free account, created a network, and downloaded a client for my Windows 10 PC, the android app, and installed it on my Debian 9 Linux desktop. Authorized 3 clients onto the network. The network is private, so has to be authorized from the ZeroTier console before allowing communication between the device and the rest of the network.

              image.png

              Once I had 3 devices connected, I began testing communication between devices.

              From Windows 10 to Debian 9:

              via SSH
              image(1).png

              via VNC
              VNC.png

              So, I am able to remote into the computer by both SSH and VNC. However, I am not able to talk on the radio and hear what I receive while I am out and about. This is my next dilemma. How do I have the two-way audio between the ham-shack box and myself when I'm out and about?

              travisdh1T 1 Reply Last reply Reply Quote 0
              • travisdh1T
                travisdh1 @NerdyDad
                last edited by

                @NerdyDad VNC should have the option to forward audio as well. Might be in the server or client setting tho, it's been a long time since I had a reason to go look at that.

                NerdyDadN 1 Reply Last reply Reply Quote 1
                • J
                  JasGot @scottalanmiller
                  last edited by

                  @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                  @JasGot said in Trading a VPN for an SSH Tunnel:

                  Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                  Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                  I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                  All more work and more money than easy and free.

                  Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                  NerdyDadN scottalanmillerS 2 Replies Last reply Reply Quote 0
                  • J
                    JasGot @JaredBusch
                    last edited by

                    @JaredBusch said in Trading a VPN for an SSH Tunnel:

                    And a fully open virus network. ZT is at least limited tot he devices it is on.

                    How so? My VPNs are locked to IP address and/or 2FA.

                    DashrenderD 1 Reply Last reply Reply Quote 0
                    • DashrenderD
                      Dashrender @JasGot
                      last edited by

                      @JasGot said in Trading a VPN for an SSH Tunnel:

                      @JaredBusch said in Trading a VPN for an SSH Tunnel:

                      And a fully open virus network. ZT is at least limited tot he devices it is on.

                      How so? My VPNs are locked to IP address and/or 2FA.

                      Once something gets onto any node - it can spread the virus to all other VPN nodes... the same applies to ZT, though JB's claim is that ZT won't likely be installed everywhere.

                      To JB's claim I say - so what? Once a multi-homed computer is infected, it can easily try to infect any other local computers, so... not really much of a saving grace there.

                      JaredBuschJ J 2 Replies Last reply Reply Quote 0
                      • NerdyDadN
                        NerdyDad @travisdh1
                        last edited by

                        @travisdh1 said in Trading a VPN for an SSH Tunnel:

                        @NerdyDad VNC should have the option to forward audio as well. Might be in the server or client setting tho, it's been a long time since I had a reason to go look at that.

                        I didn't see it in VNC, but maybe I am using the wrong VNC server (TightVNC vs UltraVNC). Can you send me some more information?

                        I also found crtmpserver that streams audio both ways and to Android devices. Maybe it will work instead? How hard would it be to setup?

                        1 Reply Last reply Reply Quote 0
                        • JaredBuschJ
                          JaredBusch @Dashrender
                          last edited by

                          @Dashrender said in Trading a VPN for an SSH Tunnel:

                          @JasGot said in Trading a VPN for an SSH Tunnel:

                          @JaredBusch said in Trading a VPN for an SSH Tunnel:

                          And a fully open virus network. ZT is at least limited tot he devices it is on.

                          How so? My VPNs are locked to IP address and/or 2FA.

                          Once something gets onto any node - it can spread the virus to all other VPN nodes... the same applies to ZT, though JB's claim is that ZT won't likely be installed everywhere.

                          To JB's claim I say - so what? Once a multi-homed computer is infected, it can easily try to infect any other local computers, so... not really much of a saving grace there.

                          Coorect not much of one but it is a smaller attack surface by a bit

                          1 Reply Last reply Reply Quote 0
                          • J
                            JasGot @Dashrender
                            last edited by

                            @Dashrender said in Trading a VPN for an SSH Tunnel:

                            Once something gets onto any node - it can spread the virus to all other VPN nodes...

                            True, hopefully gateway security suites will stop that.

                            scottalanmillerS 1 Reply Last reply Reply Quote 0
                            • scottalanmillerS
                              scottalanmiller @JasGot
                              last edited by

                              @JasGot said in Trading a VPN for an SSH Tunnel:

                              True, hopefully gateway security suites will stop that.

                              VPNs bypass those things. At least in most cases. Gateway security is never really where you expect things to be stopped. It's the individual machines where you hope for the real defenses to be sitting. Whether it's because the LAN is breached in some other way, or a hole is punched by the VPN, Gateway security is too far from the main attack points and knows nothing about most attack vectors.

                              1 Reply Last reply Reply Quote 1
                              • NerdyDadN
                                NerdyDad @JasGot
                                last edited by

                                @JasGot said in Trading a VPN for an SSH Tunnel:

                                @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                @JasGot said in Trading a VPN for an SSH Tunnel:

                                Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                                Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                                I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                                All more work and more money than easy and free.

                                Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                                $70 for what you are proposing with more hardware and equipment that could fail and I have to maintain in my house that my wife won't like because its more "junk" versus ZeroTier which is free, software only, and my wife won't have to see it.

                                Hmmm....Decisions, decisions.

                                jmooreJ 1 Reply Last reply Reply Quote 1
                                • jmooreJ
                                  jmoore @NerdyDad
                                  last edited by

                                  @NerdyDad You mean there are actual decisions to that lol? ZT for the win

                                  1 Reply Last reply Reply Quote 0
                                  • scottalanmillerS
                                    scottalanmiller @JasGot
                                    last edited by

                                    @JasGot said in Trading a VPN for an SSH Tunnel:

                                    @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                    @JasGot said in Trading a VPN for an SSH Tunnel:

                                    Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                                    Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                                    I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                                    All more work and more money than easy and free.

                                    Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                                    Comparing to a bad decision is misleading. You have to throw money away today, and ignore better options, to them create the "savings" of spending money. That's a false decision matrix.

                                    The real comparison is against something free. That's the baseline to beat. Otherwise, nothing is costly compared to any contrived more expensive decision.

                                    Example: I want a laser light show for my house, I don't need it, I just want it. The free option is to not buy one. Buying one is normally $100. But I could find one that is $200 and then say that the $100 is "free" or even "saving me money." But this is false, it's still costing $100 no matter how many more expensive alternatives we find.

                                    It's like the 'sale' problem. The shirt was on sale for 50% off, I saved 50%!! No, you still bought a shirt you didn't need, money was lost versus the free baseline.

                                    JaredBuschJ stacksofplatesS 2 Replies Last reply Reply Quote 0
                                    • JaredBuschJ
                                      JaredBusch @scottalanmiller
                                      last edited by JaredBusch

                                      @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                      @JasGot said in Trading a VPN for an SSH Tunnel:

                                      @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                      @JasGot said in Trading a VPN for an SSH Tunnel:

                                      Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                                      Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                                      I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                                      All more work and more money than easy and free.

                                      Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                                      Comparing to a bad decision is misleading. You have to throw money away today, and ignore better options, to them create the "savings" of spending money. That's a false decision matrix.

                                      The real comparison is against something free. That's the baseline to beat. Otherwise, nothing is costly compared to any contrived more expensive decision.

                                      Example: I want a laser light show for my house, I don't need it, I just want it. The free option is to not buy one. Buying one is normally $100. But I could find one that is $200 and then say that the $100 is "free" or even "saving me money." But this is false, it's still costing $100 no matter how many more expensive alternatives we find.

                                      It's like the 'sale' problem. The shirt was on sale for 50% off, I saved 50%!! No, you still bought a shirt you didn't need, money was lost versus the free baseline.

                                      Except I need the shirt. No one wants to see me topless. I proved that back in January.

                                      1 Reply Last reply Reply Quote 4
                                      • jt1001001J
                                        jt1001001
                                        last edited by

                                        Oldish thread looks like you found a solution using ZeroTier. Has anyone done something similar using SoftEther VPN? I am looking at a SoftEther setup (not by me) trying to figure it out; looks likkey they have asome soft of cloud server and are bridging the VPN's to make a large network.

                                        1 Reply Last reply Reply Quote 0
                                        • stacksofplatesS
                                          stacksofplates @scottalanmiller
                                          last edited by stacksofplates

                                          @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                          @JasGot said in Trading a VPN for an SSH Tunnel:

                                          @scottalanmiller said in Trading a VPN for an SSH Tunnel:

                                          @JasGot said in Trading a VPN for an SSH Tunnel:

                                          Put a RouterBoardOS RB260GS at each house and use a free ddns service. $35each and yo're done.
                                          Or a Ubiquiti Edge Router Lite will work too, just more expensive.
                                          I use the Ubiquiti ERL for IPSec into my house from the office, my phone, and my laptop. Love it.

                                          All more work and more money than easy and free.

                                          Easy is relative. $70 for the two is only $10 more than he is currently paying for one year. Starting with month 15, it is free!

                                          Comparing to a bad decision is misleading. You have to throw money away today, and ignore better options, to them create the "savings" of spending money. That's a false decision matrix.

                                          The real comparison is against something free. That's the baseline to beat. Otherwise, nothing is costly compared to any contrived more expensive decision.

                                          Example: I want a laser light show for my house, I don't need it, I just want it. The free option is to not buy one. Buying one is normally $100. But I could find one that is $200 and then say that the $100 is "free" or even "saving me money." But this is false, it's still costing $100 no matter how many more expensive alternatives we find.

                                          It's like the 'sale' problem. The shirt was on sale for 50% off, I saved 50%!! No, you still bought a shirt you didn't need, money was lost versus the free baseline.

                                          The wife gets mad when I tell her you save 100% if you don't buy anything.

                                          1 Reply Last reply Reply Quote 4
                                          • 1
                                          • 2
                                          • 1 / 2
                                          • First post
                                            Last post