[plug] Routing with nonat - ssh tunnel and port forwarding

[Daniel Pittman]

Carl Gherardi <carl.gherardi at gmail.com> writes:
> On Thu, Mar 19, 2009 at 9:51 AM, Daniel Pittman <daniel at rimspace.net> wrote:
>> Carl Gherardi <carl.gherardi at gmail.com> writes:

[...]

>> ...um, and if you already have a tunnel why can't you just use that?
>
> Its natting.

Oh.  You said that, and I forgot.  Sorry. :)

> If i dont nat traffic over the tunnel then the bit bucket comes into
> play. 95% or traffic is fine using the current tunnel, i need two
> servers to talk on their actual ip address to get the last 5%

...and I presume you can't just drop that, either, which is annoying.

[...]

> I figured a ssh vpn from 10.61.0.host to 10.61.6.host (port forwarding
> remote end) would solve the issue.

Well, if it is only for a very brief period, or you can stand having to
manually babysit the tunnel, it will.  For long term or production use,
not so much. :)

Regards,
        Daniel