Re: Unable to tunnel CSS CA through ssh tunnels

[Ralph Lange <ralph.lange@gmx.de>]

Hi Jon,

On 29/05/2016 04:41, Jon Brinkmann wrote:

Several years ago Andre Charbonneau described how to tunnel CA
through ssh tunnels:

http://www.aps.anl.gov/epics/tech-talk/2013/msg00142.php

The method works well for EPICS base and extensions that use the EPICS
libraries.  It doesn't work with CSS because CSS doesn't use those libraries.
I think CSS uses Java CA.  I've searched the CSS documentation and the
Internet in vain.  Can it be done in the current version of CSS (4.1.1)?
If so, how?  If not, would you consider adding that functionality?

Alas, this feature has not been added to Java CA.

Basically, you have three options:

1. Add it to Java CA. You probably want to coordinate with the upstream authors on the best way to do that.
2. Pay someone to add it to Java CA. There are consulting firms that would be in the position to help. Osprey DCS and Cosylab are among those.
3. Use a workaround. Either a specific UDP solution (as the one one Till pointed out), or an EPICS CA Gateway on your client side box. The Gateway would use on its client side a setup similar to the one described in the Tech-Talk message you refer to (but with a different local port), and set its server side to localhost:5064.
   CS-Studio instances (and all other clients) would then use that Gateway on localhost to get through the tunnel.

Hope this helps,
~Ralph