Self-hosted SSH Proxy: Difference between revisions

Jump to navigation Jump to search
no edit summary
No edit summary
Line 2: Line 2:


The Allegro Network Multimeter can be configured to to use SSH Port Forwarding to allow remote access to the device behind a NAT.  
The Allegro Network Multimeter can be configured to to use SSH Port Forwarding to allow remote access to the device behind a NAT.  
The Multimeter will create a tunnel to an SSH endpoint and will open a listening port on the SSH server.  
The Allegro network Multimeter will create a tunnel to an SSH endpoint and will open a listening port on the SSH server.  
This port can now be used to send HTTPS requests to the Multimeter.
This port can now be used to send HTTPS requests to the Allegro Network Multimeter.


=== Preparing the SSH server ===
=== Preparing the SSH server ===
Line 22: Line 22:


Paste the line into the file and save/close the file.
Paste the line into the file and save/close the file.
There are two options to access the Multimeter:
There are two options to access the Allegro Network Multimeter:


==== Option 1: No proxy ====
==== Option 1: No proxy ====
Line 46: Line 46:
* uses default HTTPS port 443.
* uses default HTTPS port 443.
* uses several filter mechanisms provided by the proxy software.
* uses several filter mechanisms provided by the proxy software.
* uses the same SSH server as proxy for several Multimeters through SNI routing.
* uses the same SSH server as proxy for several Allegro Network Multimeters through SNI routing.


Disadvantage:
Disadvantage:
Line 76: Line 76:
  }
  }


Forwarding to the Allegro Network Multimeter uses the configured server name. In this example, requests to '''allegro-mm-1234.mm-remote.company.com''' will be forwarded to the Multimeter.
Forwarding to the Allegro Network Multimeter uses the configured server name. In this example, requests to '''allegro-mm-1234.mm-remote.company.com''' will be forwarded to the Allegro Network Multimeter.
This requires that the hostname is resolved by the DNS server. This can be solved by a wildcard DNS CNAME entry to point at the SSH server.
This requires that the hostname is resolved by the DNS server. This can be solved by a wildcard DNS CNAME entry to point at the SSH server.


=== Configuration of the Multimeter ===
=== Configuration of the Allegro Network Multimeter ===


In the configuration dialogue, insert the parameters to access the SSH server. For example:
In the configuration dialogue, insert the parameters to access the SSH server. For example:
Line 88: Line 88:
* Listening HTTPS Port on SSH Host: '''55443'''
* Listening HTTPS Port on SSH Host: '''55443'''


The settings have to match the above configuration. '''Every Multimeter requires a separate HTTPS listening port..'''
The settings have to match the above configuration. '''Every Allegro Network Multimeter requires a separate HTTPS listening port..'''
If the '''SSH user''' is not '''root, no port below 1024''' is possible. Otherwise, an error message will appear when trying to connect.
If the '''SSH user''' is not '''root, no port below 1024''' is possible. Otherwise, an error message will appear when trying to connect.
60

edits

Navigation menu