noc.social is part of the decentralized social network powered by Mastodon.
This instance is focused on technology, networking, linux, privacy, security, infosec, engineering, but open to anyone. Civil discourse, polite and open. Managed by the noc.org / trunc.org team.

Administered by:

Server stats:

674
active users

Learn more

Hey #IT #SysAdmin!

In my company, we are revisiting the remote access to deployed products.

We have about ~250 deployed Linux computers; which we historically update, monitor and configure via the customers' #VPN.

Customers progressively prohibit/complexifies this access (2FA, bastions, etc): automated administration becomes more and more difficult.

We are currently investigating #rathole (github.com/rapiz1/rathole) to establish a secured SSH tunnel, thus bypassing the VPNs.

Some customers still require access logs, ssh logs, key rotation, etc.

Any advices and/or alternatives (e.g. #tailscale, #ngrok ? (besides hiring a sysadmin, which we may soon)

GitHub - rapiz1/rathole: A lightweight and high-performance reverse proxy for NAT traversal, written in Rust. An alternative to frp and ngrok.GitHub

Last year I wrote about using #ApacheKafka with #ngrok, and was chuffed how easily it worked.

Yesterday I went to use it for a forthcoming blog…and it didn't work.

After much gnashing of teeth and a fair bit of swearing, I got it to work. The culprit? DNS. Always DNS…

I’ve been looking for an ngrok alternative for a while now that’s (a) affordable (b) easy to use and (c) works with Kitten¹. Today, after testing a bunch of them again and getting fed up, I found LocalXpose that checks all the boxes.

I signed Small Technology Foundation up as an affiliate so if you use this link to check it out, we’ll get 40% of your $6/mo pro account fee should you subscribe:

localxpose.io/?via=kitten

¹ codeberg.org/kitten/app

#ngrok #LocalXpose #Kitten #SmallWeb #web #dev

LocalXpose | Bye bye localhost, hello worldLocalXpose

Not sure how I feel about this: I’m a paying #ngrok user for the only reason that I like having a static domain. ngrok just announced “static domains for our free users.” In theory I no longer need to pay… but paying helps them.