The Great Escape - Tunnel your way to freedom with SSH

SSH is something that many developers and most sysadmins and devops folk use on a daily basis, but we usually barely scratch the surface of what it's capable of. These slides are from my talk at #OSDC2015, showing how you can use SSH to create different types of tunnels that can allow any kind of app to communicate securely between any network, or even make your traffic appear to come from somewhere else entirely.

1. The Great Escape
Tunnel your way to freedom with SSH
@johndalton

2. The Great Escape
Tunnel your way to freedom with SSH
@johndalton

29. https://help.ubuntu.com/community/SSH_VPN

30. +---------------+ OpenSSH 4.3 +---------------+
| Machine A | tun0 -- Tunnel Interface -- tun0 | Machine B |
| Has a tunnel | <------------------------------->| Has a tunnel |
| and ethernet | 10.0.0.100 10.0.0.200 | and ethernet |
+-------+-------+ point to point connection +-------+-------+
eth0 | creates a bridge | eth0
10.0.0.100 | that plugs machine B | 192.168.0.100
port 22 | into network A |
forwarded | |
here | |
+-------+-------+ +-~-~-~-~-~-~-~-+ +-------+-------+
| Network A | | | | Network B |
| 10.0.0.1/24 | 1.2.3.4 | The Internet | | 192.168.0.1/24|
| Has internet |<-------->| |<----->| Has internet |
| NAT gateway | Routable | | | NAT gateway |
+---------------+ Address +-~-~-~-~-~-~-~-+ +---------------+

31. https://github.com/sshuttle/sshuttle

32. brew install sshuttle
sudo sshuttle --dns -Dr
[email protected] 0/0

33. When all you have is a hammer…

34. When all you have is a hammer…
Multitool