Hacker News Reader

Comment by ovi256 | Hacker News Reader

This is a neat idea, but still requires running a local executable. To ease adoption, a web app would be better.

So how about a ngrok like service where you just open a page to forward local traffic ? The vulnerability we've seen yesterday, "A web page can see your local servers", suggests it's doable. The webrtc code needs to open a HTTP connection to the local server. JS code would proxy all requests coming through an external hostname to this local server. Is this doable ?

"I can see your local servers" https://news.ycombinator.com/item?id=20028108

View on HN

Shameless self plug

That is the exact reason I made sish (ssi.sh). It uses ssh to do local port forwarding and can be self hosted with authentication. It's open source[0] and the only thing you need locally is SSH (which is included by default on most systems).

[0]: https://github.com/antoniomika/sish

This is cool! I came up with something similar for hosting a few personal sites from my home network, except I did it the other way around - I built a docker image that does the SSH tunneling part. The external host is just a cheap droplet with GatewayPorts set to yes in the sshd config. A benefit of doing it this way is that you don't even have to expose localhost; I have Caddy running in another container in a docker-compose.yml file, so I can forward it directly with:

  ssh -R 80:caddy:80 -R 443:caddy:443

So all the networking happens within the network created by docker-compose.

Nice, that's something that's useful too. I think this is especially important as it pertains to home services/exposed things. I just wanted to build my own tools around it mainly for the virtual hosting/websockets support. Also I just find these things fun to write and figure out :)

Neat! This is like a self-hosted version of ngrok? So you'd just need a public host somewhere and then you can tunnel in. I've been doing some edge computing stuff recently with Windows, so I'd love to try this with RDP.

Yep, that's exactly it! Because it supports TCP forwarding, that sounds like it should work!

This sounds like a fun summer projects. I'll take a look

Reply on news.ycombinator.com