From: Tom Lane <tgl@sss.pgh.pa.us>
To: =?UTF-8?Q?Jacobo_S=C3=A1nchez_L=C3=B3pez?= <jsanchez@denodo.com>
cc: pgsql-odbc@lists.postgresql.org
Subject: Re: ssh tunneling
In-reply-to: <6df41445-10f5-42bf-a4c2-48ceaad4f35c@denodo.com>
References: 
 <CABbEOvy27FC4ECcGQcPY6u7LCHWqjJT98_2=bfWVCVqCOdYkgA@mail.gmail.com>
 <CADK3HHKTNcd5xaTogEPkt0JVSfxNrfg9_UCSVuz0tw+5HvVQXg@mail.gmail.com>
 <CADK3HH+oW+6b4U4gEfVmp_7ts5XMjN0ZQN7e=tH8psxgmwj4Kw@mail.gmail.com>
 <SA1PR17MB53505C81C0DD3D297B7247BFBE742@SA1PR17MB5350.namprd17.prod.outlook.com>
 <6df41445-10f5-42bf-a4c2-48ceaad4f35c@denodo.com>
Comments: In-reply-to =?UTF-8?Q?Jacobo_S=C3=A1nchez_L=C3=B3pez?=
 <jsanchez@denodo.com>
	message dated "Wed, 24 Jan 2024 09:39:37 +0100"
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <163398.1706114385.1@sss.pgh.pa.us>
Content-Transfer-Encoding: quoted-printable
Date: Wed, 24 Jan 2024 11:39:45 -0500
Message-ID: <163399.1706114385@sss.pgh.pa.us>
Archived-At: 
 <https://www.postgresql.org/message-id/163399.1706114385%40sss.pgh.pa.us>
Precedence: bulk

=3D?UTF-8?Q?Jacobo_S=3DC3=3DA1nchez_L=3DC3=3DB3pez?=3D <jsanchez@denodo.co=
m> writes:
> Maybe the original message is about SSH proxy instead of tunneling?
> The PostgreSQL protocol makes a SSH upgrade instead of starting the =

> communication with SSH handshake and that is a problem when using some =

> SSH proxies/load balancers which are nowadays common in cloud =

> environments. I also wish there was a way to connect directly to a SSH =

> socket but that is not about the driver but how PostgreSQL communication=
 =

> protocol I guess.

FYI, there's some work going on to make it possible to begin the
connection with an SSL handshake:

https://www.postgresql.org/message-id/flat/CAM-w4HOEAzxyY01ZKOj-iq=3DM4-VD=
k=3DvzQgUsuqiTFjFDZaebdg@mail.gmail.com

If you'd like to see that move along, review and especially
testing of the proposed patch would help make it happen.

			regards, tom lane