Thread

1. ghoshbishakh · 1789755768 · focus · HN ↗

   This is a very good solution for HTTP(S) tunneling - which is the most frequently needed tunnel. However if you want to play a game, or use SSH, then Pinggy tunnels are very simple to use. One command:

   ssh -p 443 -R0:localhost:443 tcp@free.pinggy.io

   Disclosure: Co-founder of pinggy.io here.

   Edit: I meant TCP tunnels, UDP tunnels, or also TLS tunnels for end-to-end encryption.

   1. tonymet · 1789756649 · focus · HN ↗

      i love this! never understood why a proxy app was needed

      1. fragmede · 1789757011 · focus · HN ↗

         So you don't know my IP (DDoS target), and because of NAT.

         1. tonymet · 1789758556 · focus · HN ↗

            any app will connect with an IP am I missing something . a socket is exactly (IP, port) (src, target) tuple

            1. c0wb0yc0d3r · 1789760298 · focus · HN ↗

               For me, it’s as much about ease of use as much as it is about minimizing attack surface area.

               Also the lifetime I need the connection open. For something quick, ssh tunnel. For something normies use, reverse proxy. Ain’t trying to teach my parents about IP addresses and port numbers.

               1. tonymet · 1789766718 · focus · HN ↗

                  tredre3 explained it above
         2. tredre3 · 1789761249 · focus · HN ↗

            I think tonymet meant he didn't understand why cloudflare didn't allow using ssh -R instead of cloudflared to create the tunnel, not not using a tunnel at all.

            1. tonymet · 1789766694 · focus · HN ↗

               precisely (thanks!)
            2. judge2020 · 1789773672 · focus · HN ↗

               cloudflared is a bit unique in that it makes multiple outbound connections to CF DCs to do the tunneling and fails over if a DC has an issue (or, more likely, when a DC is near-capacity and they need to divert lower-tier traffic away from it[0]). SSH would reintroduce a single point of failure to this.

               Also, the _main_ use case of `cloudflared` tunneling is using it as a long-term way to host production websites on your own hostname. the ability to create ad-hoc tunnels is more of a gimmick / advertising opportunity.

               0: <a href="https:&#x2F;&#x2F;github.com&#x2F;judge2020&#x2F;cloudflare-connectivity-test&#x2F;wiki&#x2F;Explanation" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;judge2020&#x2F;cloudflare-connectivity-test&#x2F;wi...

   2. caymanjim · 1789758119 · focus · HN ↗

      What kind of usage limits?

      1. ghoshbishakh · 1789758900 · focus · HN ↗

         A free session runs for 60 seconds after which it has to be restarted and the address changes.

         You can get the address with an API call.. but we charge for convenience. Pays the infra bills.

         1. ghoshbishakh · 1789797479 · focus · HN ↗

            *60 minutes
   3. gpugreg · 1789841675 · focus · HN ↗

      When running this ssh command in qterminal, I can not click on the URL because it refreshes faster than I can right-click and click on &quot;Open Link&quot;. Do I have to type the URL by hand or is there a workaround?

      EDIT: Found a workaround. Double-click the URL and paste it with middle-click.

Unofficial Hacker News client; not affiliated with Y Combinator.