Re: Multiple server connections
Tom Sneddon <zebedee-list-4XgCj7/[email protected]> Wed, 15 Mar 2006 11:33:59 -0500
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <[email protected]> |
Why can't you have one Zebedee process running on one server machine in
the main office, forwarding traffic to the other servers? As long as
they are on the same subnet, or you have your routing configured
correctly, it should work. It does for me.
For example.
Here is a portion of a sample server.zbd file on one of your servers in
the main office, say this server is 10.10.1.1. I've removed all lines
that don't help to explain the setup.
server true # Yes, it's a server!
serverport 5000 # Listen on this port.
# Need hole in firewall.
checkidfile 'clients.id' # Pre-shared keys in this file
redirect 22 # SSH
target 10.10.1.1:22/tcp # SSH on 10.10.1.1
target 10.10.1.2:22/tcp # SSH on 10.10.1.2
target 10.10.1.3:22/tcp # SSH on 10.10.1.3
target 10.10.1.4:22/tcp # SSH on 10.10.1.4
Then, each client will be set up as so...
Client1:
serverport 5000 # Port that zebedee talks on.
serverhost my.office.domain # Where is the server listening?
# Needs DNS or hosts file.
tunnel 5022:10.10.1.1:22 # SSH on 10.10.1.1
Client2:
serverport 5000 # Port that zebedee talks on.
serverhost my.office.domain # Where is the server listening?
# Needs DNS or hosts file.
tunnel 5022:10.10.1.2:22 # SSH on 10.10.1.2
Client3:
serverport 5000 # Port that zebedee talks on.
serverhost my.office.domain # Where is the server listening?
# Needs DNS or hosts file.
tunnel 5022:10.10.1.3:22 # SSH on 10.10.1.3
Client4:
serverport 5000 # Port that zebedee talks on.
serverhost my.office.domain # Where is the server listening?
# Needs DNS or hosts file.
tunnel 5022:10.10.1.4:22 # SSH on 10.10.1.4
So, there you have one server in the home office, running one Zebedee
process, forwarding SSH traffic to four different servers. You'll need
a key for each client on the server. I use pre-shared keys. They can
be added and removed without stopping the Zebedee process. Just edit
the clients.id text file as needed.
I hope this helps.
Please cheerfully ignore if I've misunderstood your requirements...
Thanks,
Tom Sneddon
Gam wrote:
> /
> /
> Hi all,
> I have started using ZBD to handle ssh tunnels between our main
office to our different kiosks installed in different places around
Singapore. Each kiosk has its ADSL line.
>
> I have found out that a client can only connect to ONE server (if
serverhost is not specified, the first host of a tunnel is taken...)
>
> I would like to have one client configuration file + process running
in the office instead of a file+process couple per kiosks (which becomes
quite ugly when you reach a number of 10 kiosks...).
>
> My questions are:
> - Do you confirm there is NO way to specify tunnels for the client to
connect different servers (even sequentially if not parallel) with
something like:
> tunnel serverhost localport:targethost:targetport
>
> - If no, is there any chances that multi-server support is on its
way? any other suggestion?
>
>
> Thanks for your answers,
> Best Regards,
> Gam.
>
...
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642