Forum Discussion
Demeter_Luo_168
Nimbostratus
NimbostratusSSH Proxy problem
Hi Friends
My environment is as follow:
Before:
telnet client ----》 aduit device ----》 telnet server
Change to:
ssh client ---》 F5 BIGIP（ssh proxy） ---->> aduit device ---->> telnet server
In order to secure the front need to use SSH to log in,But the backend needs to audit the telnet commands log.
So BIGIP need to change the flow from telnet to ssh.
How to realize this function. iRules or Other？
3 Replies
Demeter_Luoi want to releaze the combination of SSL and telnet.Is there a successful solution?
Scott_HopkinsTelnet and SSH are two drastically different application protocols... SSH uses a non-SSL based encryption scheme to encrypt traffic between the client and the server; telnet is basically a raw socket.
It would be possible to use something like stunnel on the client, then routing your telnet client through that, but that's still not as good as SSH.
Client Machine | BigIP Device | Audit Device | Server ----------------------------+--------------------------------------+-------------------+------------------ telnet client --> stunnel --|--> BigIP SSL/TLS virtual (offload) --|--> audit device --|--> telnet serverI'd personally recommend something like SSH, paired with auditd on the server side: http://whmcr.com/2011/10/14/auditd-logging-all-commands/
Roy_Leon_142188Thanks
