Re: Multilevel SSH

[salva]

in reply to Multilevel SSH

You can use Net::OpenSSH and Net::OpenSSH::Gateway. The later is not on CPAN yet because I am not completely happy with its internals, but otherwise it is completely functional.

Once installed, you can run:

my $ssh = Net::OpenSSH->new($target,
                            gateway => { proxies => ['ssh://serverA',
                                                     'ssh://serverB'] 
+});

my $output = $ssh->capture('ls');

Under the hood it uses several tricks to find a way to jump from one hop to the next, as creating tunnels or running any of socat, netcat or perl.

[grantm]

Under the hood it uses several tricks to find a way to jump from one hop to the next, as creating tunnels or running any of socat, netcat or perl.

I learned recently that the latest versions of OpenSSH support -W host : port to do what historically we've done with socat/netcat.

[salva]

I know, I requested it :-)

Net::OpenSSH::Gateway already supports it but -W requires port forwarding to be enabled on the server and, in my experience, that feature is frequently disabled in ssh gateways for security reasons.