Hacker News Reader

This is as good a time as any to point people in the direction of sshuttle, which is a very simple and elegant VPN that can use any SSH server as an endpoint.

* No configuration required for endpoints - any SSH server that you have a login on will work.

* Works on Linux and FreeBSD and OSX

* Tunnels DNS and UDP, etc.

* I have no idea how fast it is.

https://github.com/sshuttle/sshuttle

View on HN

sshuttle does not tunnel UDP out-of-the-box. It only works on Linux and only if you are using the tproxy mode, which is not the default and a little more involved to set up. See: http://sshuttle.readthedocs.io/en/stable/requirements.html#l...

> It only works on Linux

Absolutely not. My colleagues with Macs are using it on macOS just fine.

> a little more involved to set up

Either TPROXY is the default on Arch Linux, or this is false as well. I just installed sshuttle via pacman and it worked without any additional setup.

"sshuttle does not tunnel UDP out-of-the-box. It only works on Linux ..."

We (rsync.net) sponsored work to get UDP functionality working with sshuttle on FreeBSD. It is my understanding that it is committed to FreeBSD ... you might need to wait for 11.2 ?

From the docs, it appears to redirect new TCP sessions through an established SSH session, so performance would be on par with a simpler SSH port forward.

Reply on news.ycombinator.com