From: Gene Selkov, Jr. <selkovjr@mcs.anl.gov>
To: PostgreSQL Interfaces <pgsql-interfaces@postgreSQL.org>
Subject: Re: [INTERFACES] documentation for ssh tunnelling of connections?
Date: Tue, 07 Sep 1999 21:39:07 -0400
Message-ID: <199909080239.VAA00320@antares.mcs.anl.gov> (raw)
Eric Marsden wrote:
> Can anyone point me to some documentation describing how to set up ssh
> to tunnell TCP/IP connections to a backend? My searches have found several
> people saying it is possible, but no step-by-step explanation I could
> point people to.
Eric,
It's the documentation for SSH that you are looking for. Please refer to
http://www.heimhardt.de/htdocs/ssh.html for better insight.
A step-by-step explanation can be done in just two steps:
1. Establish a tunnel to the backend machine, like this:
ssh -L 3333:wit.mcs.anl.gov:5432 postgres@wit.mcs.anl.gov
The first number in the -L argument, 3333, is the port number of
your end of the tunnel. The second number, 5432, is the remote
end of the tunnel -- the port number your backend is using. The
name or the address in between the port numbers belongs to the
server machine, as does the last argument to ssh that also includes
the optional user name. Without the user name, ssh will try the
name you are currently logged on as on the client machine. You can
use any user name the server machine will accept, not necessarily
those related to postgres.
2. Now that you have a running ssh session, you can connect a
postgres client to your local host at the port number you
specified in step 1. If it's psql, you will need another shell
because the shell session you used in step 1 is now
occupied with ssh.
psql -h localhost -p 3333 -d mpw
Note that you have to specify the -h argument to cause your client to
use the TCP socket instead of the Unix socket. You can omit the port
argument if you chose 5432 as your end of the tunnel.
--Gene
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-interfaces@postgresql.org
Cc: selkovjr@mcs.anl.gov
Subject: Re: [INTERFACES] documentation for ssh tunnelling of connections?
In-Reply-To: <199909080239.VAA00320@antares.mcs.anl.gov>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox