SSH Multiplexing & other OpenSSH Tricks

http://symkat.com/35/ssh-tips-and-tricks-you-need/

by symkat • 16 years ago

127 23 16 years ago

kentnl2• 16 years ago

+1 just for the multiplex magic, But then, I /would/ say that =)

That TTL thing is handy too, I'm sure I had some understanding of it previously, but reading the article made me check my settings and made me realize my timeouts were ridiculously low so even short disconnections killed my session.

mst2• 16 years ago

I do wish keepalive could be turned on/off more dynamically - most of the locations I connect from it's a disadvantage so I don't have it configured, and having to edit the config file when I'm in one where it's useful just annoys me.

I suppose I should just write a script that perl -pi -e 's/KeepAlive yes/KeepAlive no/' .ssh/config or similar, but it still seems ... annoying.

joeshaw2• 16 years ago

You might be able to provide it with the -o option:

ssh -o "KeepAlive no" example.com

pafy• 16 years ago

What about in your config file:

  Host *.whatever.com
  ServerAliveInterval 900
  Host *.whatsup.com
  ServerAliveInterval 60

mst2• 16 years ago

It's about where I am, not about where they are. slug's comment looks like a great idea though.

est2• 16 years ago

> I do wish keepalive could be turned on/off more dynamically

PuTTY can do that. It's GUI though.

slug2• 16 years ago

You can create 'fake' hosts but with the same hostname:

  ~/.ssh/config
  Host serverWith
      HostName server.home.net
      OptionBLA yes

  Host serverWithout
      HostName server.home.net
      OptionBLA no

It also has autocomplete, so you can type ssh server<TAB>

JoachimSchipper• 16 years ago

"It" being your shell. Some do.

njn• 16 years ago

I'm curious why you would want multiple connections to the same host in the first place. Why not use a terminal multiplexer?

danohuiginn2• 16 years ago

it's convenient if you want to pipe the output of a command on a remote machine into another command on a local machine

ssh server remotecommand | localcommand

lars512• 16 years ago

It removes the latency if you need to interact with the remote server, for example with remote repositories. I tried some experiments today with Bitbucket, and using connection multiplexing halved the time of most of my common mercurial operations (8s -> 4s).

joeshaw2• 16 years ago

fragmede• 16 years ago

'-t' is also useful if you have machines behind a NAT you want to get to: ssh -t gateway.example.com ssh protected_machine

mooism2• 16 years ago

Or you could add the following to your ~/.ssh/config instead:

    Host protected_machine other_protected_machine
    ProxyCommand /usr/bin/ssh gateway.example.com /bin/nc -w 3700 %h %p

(Assumes you have /bin/nc installed on your gateway.)

surki• 16 years ago

autossh http://www.debianadmin.com/autossh-automatically-restart-ssh...

est2• 16 years ago

just to be clear, multiplexing happens on the client side, right? What's the difference between multiplexing and ssh-proxy?

kentnl2• 16 years ago

Multiplexing is multiplexing. That is, encoding multiple data streams across one channel. In our case, thats having a singular SSH connection from a to b, but having multiple streams of bidirectional data flowing across that singular connection. https://secure.wikimedia.org/wikipedia/en/wiki/Multiplexing So no, multiplexing is started on the client side, and then it happens on server side too. There has to be a multiplex ( many to 1 ) and demultiplex ( 1 to many ) in order for "multiplexing" to occur.

luu• 16 years ago

I wish cygwin supported multiplexing. Emacs + TRAMP is noticeably slower for me when I'm running on Windows. Anyone have a good workaround or alternative?

guac• 16 years ago

For the proxy thing you may want to configure your applications to proxy DNS requests as well. Some do not do it by default and would leak the hostnames you're connecting to.

In firefox the about:config variable is "network.proxy.socks_remote_dns". Set it to true.

ljlolel• 16 years ago

Is there a way to do the reverse? That is, can I ensure a more stable connection by using one terminal to open multiple SSH TCP connections for faster speed and redundancy?

My workplace sometimes suffers from serious problems and because TCP allocates resources based on number of connections, I'm pretty sure I can improve the situation by establishing 2 tcp connections for the terminal.

dedward• 16 years ago

TCP was designed to assume that packet loss was due to contention... so if you have random or other non-contention-related packet loss, your sessions will slow to a crawl. In this case multiplexing might make things worse than separate sessions... but you're probably just as screwed either way. What you really need to do is just get them to fix the random packet loss problem you probably have.

SSH Multiplexing & other OpenSSH Tricks

Related Stories