아웃바운드가 불가능한 서버에서 Let's encrypt 갱신하기 - 인터넷 / 소프트웨어 - 기글하드웨어

dimohy · 10월 21, 2020, 2:34오후

SSH 리버스 터널을 이용해 SSH만 되는 환경에서도 이것 저것 할 수 있습니다. 아래는 그러한 예

dimohy · 10월 21, 2020, 2:35오후

여럿 보안 환경 때문에 가끔 사용하는데, 매번 세팅은 번거럽더군요. UI에서 어느정도 접근성을 높여주면 참 편리하겠다 생각해본적이 있습니다.

dimohy · 10월 21, 2020, 2:38오후

X11 포워딩을 SSH 역방향 터널을 이용해 GUI환경도 가능합니다

gist.github.com

https://gist.github.com/Shivanshu-Gupta/ae67abfa67f6bc8033e361dc119a7d46

X11-Forwarding-using-SSH-Reverse-Tunnel.md

# X11 Forwarding using an SSH Reverse Tunnel
X11 Forwarding is very useful when you want to run GUI based applications on a remote machine. I needed it to run IntelliJ IDE on HPC. But while X11 forwarding can be easily enabled using the -X (or -Y) option of ssh, it doesn't work if xauth is not installed on the remote server - in my case the HPC compute nodes. In this case, ssh can be used to create a reverse tunnel from the remote server to the local machine. X11Forwarding can then be done by setting the display on the remote server as the entry port of the tunnel and making the X-server listen on the exit port of the tunnel in the local machine.

Here I'll describe how I went about creating a SSH reverse tunnel from HPC compute nodes to my local machine and used that to enable X11 Forwarding. As a prerequisite, I assume that a Display Manager that launches the X-server is installed on the local machine. Popular ones are XQuartz for macOS and XMing for Windows.

1.  Enable X11 forwarding on local machine.
    1.  Add this to /private/etc/ssh/sshd_config:
        ```sh
        X11Forwarding yes
        ForwardX11 yes

This file has been truncated. show original