And a determined attacker can probably get the key another way.An SSH client is a software which uses the SSH protocol to connect to a remote computer. But again, remember that it's trivial to look at the unencrypted outgoing traffic. If you run your own server, then if someone wants your key, they have to ask you. It is incredibly easy to set up, and it is as secure as SSH. The code isn't there yet, but I've put in a placeholder for where it goes. This approach can support IPv6, so if you have an IPv6 server you can get IPv6 no matter where you are. If you're on shared wifi (coffee shop, airplane) this will stop others snooping your traffic. This is not useful for doing anything illegal. The NSA or MPAA or whoever it is can easily see this traffic, and they can ask your server provider who you are. The VPN is not anonymous, because it does nothing to encrypt the outgoing traffic from your server. This approach is unsuitable for running with untrusted users (as you have to give them sudo permission). I recommend using 8.8.8.8 and 8.8.4.4įeel free to open an issue if it doesn't work. web access, then check that your DNS servers are set correctly.

If you can ping 8.8.8.8, but you don't have e.g. If the VPN doesn't work, first check if you can ping 8.8.8.8. Running multiple VPN tunnels at once will probably break and is also very unlikely to be useful. You should be able to have multiple VPN configurations. (If you don't know how to do this, check out ssh-copy-id)Ĭreate a configuration file on your local machine: You'll need a Linux server, to which you can ssh without typing in your password. Feel free to reimplement in your own language of choice - this is intended mostly as a proof of concept! Running it It's written in Python, because Python is a bit easier (for me) than alternatives that run on most operating systems. There's not a lot to this we just find an unused tunnel device on the server and on the client, assign IP addresses using a private IP range, and then allow NAT. So you need sudo on the server, not root. Normally tun/tap requires root on the box instead we create the tun/tap devices in advance, using sudo. Windows support is theoretically possible, but there's no default SSH client on Windows (?). OS X clients are possible, but are not yet implemented it will definitely require the Tun/Tap driver to be installed.

This script should work with Linux servers and Linux clients. Using OpenSSH directly can be a little painful. If you have a server, this is a very easy way to get a quick VPN-like experience.

Because it uses SSH, setup/key management is much easier. Because it's over SSH, the traffic is encrypted. OpenSSH supports tunnels, over which you can route some or all of your network traffic. A script to make it easier to use OpenSSH 'VPN's.

Free ssh client with scripting