OpenSSH
[Top] [All Lists]

Re: tunneling support for PF_UNIX sockets

To: Topi Rinkinen <openssh-unix-dev@topisoft.fi>
Subject: Re: tunneling support for PF_UNIX sockets
From: William Ahern <william@25thandClement.com>
Date: Mon, 5 Feb 2007 13:00:44 -0800
Cc: openssh-unix-dev@mindrot.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: openssh-unix-dev-list1@securepoint.com
Delivered-to: openssh-unix-dev-tmda@mindrot.org
Delivered-to: openssh-unix-dev@mindrot.org
In-reply-to: <1170690439.7008.23.camel@topisoft.dyndns.org>
List-archive: <http://lists.mindrot.org/pipermail/openssh-unix-dev>
List-help: <mailto:openssh-unix-dev-request@mindrot.org?subject=help>
List-id: Development of portable OpenSSH <openssh-unix-dev.mindrot.org>
List-post: <mailto:openssh-unix-dev@mindrot.org>
List-subscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=subscribe>
List-unsubscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=unsubscribe>
References: <1170690439.7008.23.camel@topisoft.dyndns.org>
Sender: openssh-unix-dev-bounces+openssh-unix-dev-list1=securepoint.com@mindrot.org
User-agent: Mutt/1.4.2.2i
On Mon, Feb 05, 2007 at 05:47:19PM +0200, Topi Rinkinen wrote:
> Hi,
> 
> I've been planning to develop a support for tunneling between "local_tcp
> => server_AF_UNIX".

http://www.25thandclement.com/~william/projects/streamlocal.html

> Questions:
> 
> 3. Is there a way to achieve same goals with current ssh version?

No. And extensive patching to OpenSSH is required for AF_UNIX because the
codebase assumes AF_INET or AF_INET6 at every single point, and it assumes
in such a way that precludes easy integration of AF_UNIX.

> 4. Is there a reason not to do this?

1) It took a ton of work.

2) So much work the OpenSSH folks haven't even cared to look into it my
patch, let alone hold out the chance for integration into the trunk.

> 5. Is there a already available naming convention to support different
> address families?

No. I used a square brace ('[') convention, and re-wrote the option parser
for addresses.

> Quick_n_dirty way would be prefixing host_address with some predefined

Nope. The addresses are sent across the wire in a fixed format which
precludes use of the relatively free-form AF_UNIX paths.

- Bill
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

<Prev in Thread] Current Thread [Next in Thread>