←back to thread

SSH into private machines from anywhere using Cloudflare Tunnel

(orth.uk)
319 points SpaghettiX | 3 comments | 10 Feb 22 09:18 UTC | HN request time: 0.637s | source
Show context
mro_name ◴[10 Feb 22 12:14 UTC] No.30285094[source]▶
wasn't that the idea of ssh to begin with?
replies(2): >>30285139 #>>30285171 #
hotpotamus ◴[10 Feb 22 12:26 UTC] No.30285171[source]▶
You mean, like just login to a server without going through layers of cloud providers? How would that work?

For real, I can't imagine running a straight port 22 ssh service on the modern internet, but I'm usually happy just moving it to an unprivileged port for obscurity on personal equipment (plus some other common sense hardening of course). For work stuff, I'd feel naked without some sort of VPN and it seems that's essentially what these services are.

replies(1): >>30290204 #
1. drawfloat ◴[10 Feb 22 18:10 UTC] No.30290204[source]▶
With passwords disabled and just using key authentication, is there a big risk of just doing a straight port 22 ssh?

Genuine question, my knowledge of server security is low-to-middle.

replies(2): >>30294080 #>>30298807 #
2. hotpotamus ◴[10 Feb 22 23:07 UTC] No.30294080[source]▶
I've seen servers get hit with so many ssh login attempts that it runs out of resources to respond, effectively DOSing ssh at least. Moving it to a high port usually cuts out all the chatter.
3. mro_name ◴[11 Feb 22 08:40 UTC] No.30298807[source]▶
a risk is server bugs.