Multiple server connections
Gam <[email protected]> Tue, 28 Feb 2006 18:12:00 +0800
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <[email protected]> |
Hi all,
I have started using ZBD to handle ssh tunnels between our main
office to our different kiosks installed in different places around
Singapore. Each kiosk has its ADSL line.
I have found out that a client can only connect to ONE server (if
serverhost is not specified, the first host of a tunnel is taken...)
I would like to have one client configuration file + process running
in the office instead of a file+process couple per kiosks (which
becomes quite ugly when you reach a number of 10 kiosks...).
My questions are:
- Do you confirm there is NO way to specify tunnels for the client to
connect different servers (even sequentially if not parallel) with
something like:
tunnel serverhost localport:targethost:targetport
- If no, is there any chances that multi-server support is on its
way? any other suggestion?
Thanks for your answers,
Best Regards,
Gam.
Email Archive: zebedee-talk (read-only) Search
From: <neil@bt...>
 RE: Zebedee Client Configuration for more than one host
2005-02-24 04:34
> I spent a number of hours configuring a Zebedee-client service
and was
unable to
> determine why I could connect to the first tunnel listed but not any
of the others.
> I came to the conclusion that Zebedee only allows one service per
connection instead
> of one service handling all connections.
A Zebedee client can only connect to a single *server*. However, there
can be multiple tunnels between that client and the server, each
connecting to a different *service*. The server can connect to
services
on any number of machines. So, for example, in the following picture:
machineX machineY
Port 2000 ---> ---> machineA, Port 23
Client Port 2001 ---> Server ---> machineB, Port 80
Port 2002 ---> ---> machineC, Port 8080
The Zebedee client is running on machineX and the server on machineY.
The client has a config file something like this:
serverhost machineY
tunnel 2000:machineA:23
tunnel 2001:machineB:80
tunnel 2002:machineC:8080
The server"s looks like:
target machineA:23
target machineB:80
target machineC:8080
Then connecting to port 2001 on machineX will result in a tunnel
connected to port 80 on machineB. This is fine if you don"t need the
tunnel to be secure end-to-end from machineX to machineB. If you *do*
need secure tunnels from X to A, B and C then you will need to run
multiple Zebedee clients on X, each of which connects to one server
running on each of A, B and C.
I hope this helps.
Neil