Multiple server connections

Gam <[email protected]> Tue, 28 Feb 2006 18:12:00 +0800
Newsgroups gmane.comp.security.zebedee.general
Message-ID <[email protected]>
Hi all,
I have started using ZBD to handle ssh tunnels between our main  
office to our different kiosks installed in different places around  
Singapore. Each kiosk has its ADSL line.

I have found out that a client can only connect to ONE server (if  
serverhost is not specified, the first host of a tunnel is taken...)

I would like to have one client configuration file + process running  
in the office instead of a file+process couple per kiosks (which  
becomes quite ugly when you reach a number of 10 kiosks...).

My questions are:
- Do you confirm there is NO way to specify tunnels for the client to  
connect different servers (even sequentially if not parallel) with  
something like:
	tunnel  serverhost  localport:targethost:targetport

- If no, is there any chances that multi-server support is on its  
way? any other suggestion?


Thanks for your answers,
Best Regards,
Gam.



Email Archive: zebedee-talk (read-only) Search

From: <neil@bt...>


 RE: Zebedee Client Configuration for more than one host
2005-02-24 04:34
  > I spent a number of hours configuring a Zebedee-client service  
and was
  unable to
  > determine why I could connect to the first tunnel listed but not any
  of the others.
  > I came to the conclusion that Zebedee only allows one service per
  connection instead
  > of one service handling all connections.

  A Zebedee client can only connect to a single *server*. However, there
  can be multiple tunnels between that client and the server, each
  connecting to a different *service*. The server can connect to  
services
  on any number of machines. So, for example, in the following picture:

     machineX              machineY
            Port 2000 --->          ---> machineA, Port 23
     Client Port 2001 --->  Server  ---> machineB, Port 80
            Port 2002 --->          ---> machineC, Port 8080

  The Zebedee client is running on machineX and the server on machineY.
  The client has a config file something like this:

     serverhost machineY
     tunnel 2000:machineA:23
     tunnel 2001:machineB:80
     tunnel 2002:machineC:8080

  The server"s looks like:

     target machineA:23
     target machineB:80
     target machineC:8080

  Then connecting to port 2001 on machineX will result in a tunnel
  connected to port 80 on machineB. This is fine if you don"t need the
  tunnel to be secure end-to-end from machineX to machineB. If you *do*
  need secure tunnels from X to A, B and C then you will need to run
  multiple Zebedee clients on X, each of which connects to one server
  running on each of A, B and C.

  I hope this helps.

  	Neil