EPICS Home

Experimental Physics and Industrial Control System


 
1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  <20162017  2018  2019  2020  2021  2022  2023  2024  Index 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  <20162017  2018  2019  2020  2021  2022  2023  2024 
<== Date ==> <== Thread ==>

Subject: Re: Unable to tunnel CSS CA through ssh tunnels
From: Till Straumann <[email protected]>
To: Jon Brinkmann <[email protected]>
Cc: "[email protected]" <[email protected]>
Date: Wed, 1 Jun 2016 12:16:33 +0900
Jon.

Adding SOCKS support to caj is an almost trivial patch. With that you
can tunnel CSS just fine (did you see the respective paragraphs?

http://slac.stanford.edu/~strauman/epics/caxy/documentation/caxy.html#section_7_1_1_1

HTH
- Till

On 06/01/2016 04:06 AM, Jon Brinkmann wrote:
Till,

I've looked over your "caxy" package.  Nice job!

Also see http://www.delegate.org/delegate/, which is a very nice "Swiss
Army Knife" of tunnelling and port forwarding using SOCKS. It does both TCP
and UDP forwarding.  The documentation is a fair translation from Japanese,
so takes a little bit of work to understand.

Less versatile is https://github.com/apenwarr/sshuttle, which uses ssh
forwarding.

Unfortunately, I was hoping for a bundled solution, so I wouldn't have to put
our users through any more work than necessary.  It's to bad that CSS is not
ssh tunnelling compatible while EPICS base, and the clients that use it, are.

- Jon

On Sun, May 29, 2016 at 04:39:59PM +0900, Till Straumann wrote:
Try this. I had it working for css.

http://www.slac.stanford.edu/~strauman/epics/caxy/

HTH
- Till

On 05/29/2016 11:41 AM, Jon Brinkmann wrote:
Kay,

Several years ago Andre Charbonneau described how to tunnel CA
through ssh tunnels:

http://www.aps.anl.gov/epics/tech-talk/2013/msg00142.php

The method works well for EPICS base and extensions that use the EPICS
libraries.  It doesn't work with CSS because CSS doesn't use those libraries.
I think CSS uses Java CA.  I've searched the CSS documentation and the
Internet in vain.  Can it be done in the current version of CSS (4.1.1)?
If so, how?  If not, would you consider adding that functionality?

Jon
---
Dr. Jon Brinkmann, Factotum			Apache Point Observatory
Software Engineer				2001 Apache Point Road
Instrument Scientist				P.O. Box 59
E-mail:	[email protected]			Sunspot, NM 88349-0059
URL:	http://www.apo.nmsu.edu/brinkmann/	Tel: 575-437-6822


References:
Dynamically refresh CSS BOY runtime OPI Zhang Yuliang
RE: Dynamically refresh CSS BOY runtime OPI Mazanec Tomáš
RE: Dynamically refresh CSS BOY runtime OPI will.rogers
Re: Dynamically refresh CSS BOY runtime OPI Kasemir, Kay
Unable to tunnel CSS CA through ssh tunnels Jon Brinkmann
Re: Unable to tunnel CSS CA through ssh tunnels Till Straumann
Re: Unable to tunnel CSS CA through ssh tunnels Jon Brinkmann

Navigate by Date:
Prev: Re: Unable to tunnel CSS CA through ssh tunnels Jon Brinkmann
Next: Control System Engineer (ESS, Sweden) David Brodrick
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  <20162017  2018  2019  2020  2021  2022  2023  2024 
Navigate by Thread:
Prev: Re: Unable to tunnel CSS CA through ssh tunnels Jon Brinkmann
Next: Re: Unable to tunnel CSS CA through ssh tunnels Ralph Lange
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  <20162017  2018  2019  2020  2021  2022  2023  2024