Thread

1. ghoshbishakh · 1789755768 · focus · HN ↗

   This is a very good solution for HTTP(S) tunneling - which is the most frequently needed tunnel. However if you want to play a game, or use SSH, then Pinggy tunnels are very simple to use. One command:

   ssh -p 443 -R0:localhost:443 tcp@free.pinggy.io

   Disclosure: Co-founder of pinggy.io here.

   Edit: I meant TCP tunnels, UDP tunnels, or also TLS tunnels for end-to-end encryption.

   1. tonymet · 1789756649 · focus · HN ↗

      i love this! never understood why a proxy app was needed

      1. fragmede · 1789757011 · focus · HN ↗

         So you don't know my IP (DDoS target), and because of NAT.

         1. tonymet · 1789758556 · focus · HN ↗

            any app will connect with an IP am I missing something . a socket is exactly (IP, port) (src, target) tuple

            1. c0wb0yc0d3r · 1789760298 · focus · HN ↗

               For me, it’s as much about ease of use as much as it is about minimizing attack surface area.

               Also the lifetime I need the connection open. For something quick, ssh tunnel. For something normies use, reverse proxy. Ain’t trying to teach my parents about IP addresses and port numbers.

               1. tonymet · 1789766718 · focus · HN ↗

                  tredre3 explained it above
         2. tredre3 · 1789761249 · focus · HN ↗

            I think tonymet meant he didn't understand why cloudflare didn't allow using ssh -R instead of cloudflared to create the tunnel, not not using a tunnel at all.

            1. tonymet · 1789766694 · focus · HN ↗

               precisely (thanks!)
            2. judge2020 · 1789773672 · focus · HN ↗

               cloudflared is a bit unique in that it makes multiple outbound connections to CF DCs to do the tunneling and fails over if a DC has an issue (or, more likely, when a DC is near-capacity and they need to divert lower-tier traffic away from it[0]). SSH would reintroduce a single point of failure to this.

               Also, the _main_ use case of `cloudflared` tunneling is using it as a long-term way to host production websites on your own hostname. the ability to create ad-hoc tunnels is more of a gimmick / advertising opportunity.

               0: <a href="https:&#x2F;&#x2F;github.com&#x2F;judge2020&#x2F;cloudflare-connectivity-test&#x2F;wiki&#x2F;Explanation" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;judge2020&#x2F;cloudflare-connectivity-test&#x2F;wi...

Unofficial Hacker News client; not affiliated with Y Combinator.