From: Randy Lawrence <jm@...>
Date: 2004-07-06T09:30:18+09:00
Subject: Re: [ANN] Net::SSH 0.0.2

Jamis Buck wrote:

> Randy Lawrence wrote:
> 
>> Can we start doing SSH tunneling with Ruby 1.8.2 or do we have to wait 
>> for that feature to be implemented?
> 
> 
> Tunneling is not yet implemented, and I've been debating its usefulness 
> in the Net::SSH module. Since it sounds like you would like this 
> feature, how would *you* use it, if it were available? Can you provide a 
> few use cases?
> 
> Thanks!
> 
> - Jamis
> 

The most common use for ssh tunneling for me at the moment:

1.  accessing hosted mysql/postgresql server (ssl protocol feature not 
always available on hosted servers and secure protocol not always 
available on mysql client programs)

2.  accessing webmin on hosted server (http://localhost:10000/) - one of 
my hosting companies blocks ports > 1024

3.  accessing email on a remote server - I block pop3 to every ip except 
localhost - no need for ssl/tls etc. when I ssh tunnel pop3.

4.  and finally, accessing custom ports on remote server.  many hosting 
companies block all ports except http so this allows me to use any 
custom port without depending on them to open it up for me (i just 
localhost:4567 instead of waiting hours/days to have mydomain.com:4567 
opened up for me)

Basically, my iptables firewall blocks all ports except ssh, http(s) and 
smtp.  I then use ssh tunneling for everything else and it works like a 
charm.

In terms of using ssh tunneling with ruby scripts, the most common use 
for me would be accessing remote database servers or distributed ruby 
objects securely without messing with firewall rules (because ssh port 
is already open).