CloudTunnel Atlanta Ruby Users Group October 2012

TUNNELING FOR FUN

Jonathan Manuzak / @jonmanuzak
#ATLRUG / Oct 10, 2012

MOST OF MY DEVELOPMENT HAPPENS HERE
Photo: http://www.ﬂickr.com/photos/blueace/797823265

MOST OF MY DEVELOPMENT HAPPENS HERE

FIREWALL / NAT
•Permissive with
outgoing requests

•Restrictive with
incoming requests

•Not accessible if
behind NAT

OUTSIDE THE
FIREWALL

BUT THE REST
OF THE WORLD
IS OVER HERE

BUT, SURELY THIS IS A SOLVED
PROBLEM. RIGHT?

PROBLEM. RIGHT?

DEPENDS ON YOUR
DEFINITION OF SOLVED

PROBLEM. RIGHT?

DEPENDS ON YOUR
DEFINITION OF SOLVED
CODE, DEPLOY, TEST, FAIL, CODE, DEPLOY, TEST, FAIL, CODE, DEPLOY, TEST, FAIL, CODE, DEPLOY,
TEST, FAIL, CODE, DEPLOY, TEST, FAIL, CODE, DEPLOY, TEST, FAIL, CODE, DEPLOY, TEST, FAIL, CODE,
DEPLOY, TEST, FAIL, RINSE, REPEAT

ANATOMY OF A SSH TUNNEL

http://localhost:8080

U
s
e
r

Photos: http://eandt.theiet.org/magazine/2012/07/interview-andrew-blum.cfm, http://www.quickmeme.com/meme/35583x/

U
s
e
r

S
e
r
v
e
r

U
s
e
r
I
n
t
e
r
n
e
t
S
e
r
v
e
r

U
s
e
r
I
n
Ports t
605 e
8080 r
n
e
t

Ports
S
e
80 r
22 v
e
r

SSH TUNNELS HAVE BAGGAGE
YOU STILL NEED...

•A server that’s somewhere on the internet
• Running some kind of *nix
• That you control

I’M LAZY

ssh -tR {remote_port}:
127.0.0.1:{local_port} {user}
@{remote_host} “sudo ssh -Nl
$USER -L {host_alias}:
{local_port}:127.0.0.1:
{remote_port} {remote_host}”

Source: https://gist.github.com/945690

THERE MUST BE AN EASIER
WAY

NEAT! HOW DOES IT WORK?
CLIENT SERVICE

CLIENT SERVICE
1. Makes HTTP
POST to localtunnel

CLIENT SERVICE
1. Makes HTTP
POST to localtunnel
2. Responds with an open
hostname and port

CLIENT SERVICE
1. Makes HTTP
POST to localtunnel
hostname and port
3. Opens a tunnel
using speciﬁed port

CLIENT SERVICE
1. Makes HTTP
POST to localtunnel
hostname and port
3. Opens a tunnel
using speciﬁed port
4. Proxies trafﬁc from
your assigned hostname
to your tunnel

TROUBLE IN PARADISE
• Random hostname, changes every time.

TROUBLE IN PARADISE

• Idle timeout

TROUBLE IN PARADISE

• Idle timeout

• Change network connections?

TROUBLE IN PARADISE

• Idle timeout


• Put your laptop to sleep?

TROUBLE IN PARADISE

• Idle timeout


• Put your laptop to sleep?

• Stop and start your server?

WHAT I REALLY WANT IS...

MACBOOK.MANUZAK.COM

ALL. THE. TIME.

ALTERNATIVES

showoff.io
• Allows custom CNAMEs!

• $5/mo

pagekite.net

• Allows custom CNAMEs!

• ~$4/mo

CLOUDTUNNEL TO THE RESCUE!

Photo: http://commons.wikimedia.org/wiki/File:Roll-cloud.JPG

WHAT IS CLOUDTUNNEL?
CLIENT SERVICE

CLIENT SERVICE
•Keeps the connection
alive

•Restarts the connection
if needed

•Runs localtunnel as a
daemon

CLIENT SERVICE
•Keeps the connection •Allows you to specify your
alive hostname

•Restarts the connection •Supports CNAMES!
if needed
•Redirects users to your
•Runs localtunnel as a current tunnel address
daemon

CLIENT

➜ ps aux | grep cloud_tunnel
19036 1.2 0.1 2509496 12164 7:22AM 0:03.37 cloud_tunnel
19024 0.0 0.1 2490680 14504 7:22AM 0:00.29 cloud_tunnel_monitor
19023 0.0 0.1 2501304 18332 7:22AM 0:00.42 cloud_tunnel

CLIENT - TUNNEL
module CloudTunnel
  class Tunnel
    TUNNEL_SERVICE_HOST_DOMAIN = 'localtunnel.com'

    attr_reader :host, :pid

    def open_tunnel
     start_tunnel_in_background
    end

    def connected?
      return false unless @pid
      ping_tunnel && process_alive?(@pid)
    end

    def keep_alive
      ping_tunnel
    end

CLIENT - TUNNEL
    def start_tunnel_in_background
      key = File.open(KEY_FILE).read

      t = LocalTunnel::Tunnel.new(PORT, key)
      t.register_tunnel

      pid = fork { t.start_tunnel }

      @host = t.host
      @pid = pid
      Process.detach(@pid)
    end

FORKING AND PIDS
• PID = Process ID

• Unique ID for each running process

• Allows direct access for management

• Why Process (fork)?

• Process.detach == Thread.new { Process.wait(pid) }

CLIENT - TUNNEL
    def process_alive?(pid)
      begin
        Process.getpgid(pid)
        true
      rescue Errno::ESRCH
        false
      end
    end

    def ping_tunnel
      url = "http://
#{@host}.#{TUNNEL_SERVICE_HOST_DOMAIN}"
      uri = URI(url)
      response = Net::HTTP.get_response(uri)

      case response
      when Net::HTTPSuccess
        true
      else
        false
      end
    end
  end
end

CLIENT - DAEMON
require 'cloud_tunnel'

SLEEP_INTERVAL = 180

loop do
  @tunnel ||=nil

  start_tunnel_and_register_pid unless @tunnel && @tunnel.connected?

  sleep(SLEEP_INTERVAL)
end

def start_tunnel_and_register_pid
  # Clean up if process was running previously
  kill_background_process(@pid) unless @pid.nil?

  # Open the tunnel
  @tunnel = CloudTunnel::start
  @pid = @tunnel.pid

  # Ensure the background processes get killed on exit
  at_exit do
    kill_background_process(@pid)
  end
end

CLIENT - REGISTRATION
module CloudTunnel
  class RedirectClient

    def create_or_update(source, destination)
      uri = URI('http://ctr.herokuapp.com/route')
      req = Net::HTTP::Post.new(uri.path)
      req.set_form_data(:source => source, :destination => destination)

      res = Net::HTTP.start(uri.hostname, uri.port) do |http|
          http.request(req)
      end

      case res
      when Net::HTTPSuccess
        true
      else
        raise 'Could not update redirect server'
      end
    end
  end
end

SERVICE
•Sinatra app
•Running on Heroku
•Dead simple API
get '/'

post '/route'

delete '/route'

SERVICE - ROUTE
require 'sinatra'
require 'dm-core’

class Route
  include DataMapper::Resource
  property :id, Serial
  property :source, String, :unique => true
  property :destination, String
  property :port, Integer
end

SERVICE - REDIRECT

get '/' do
  route = Route.last(:source => parse_hostname(request.host))
  if route
    redirect_path = "#{route.destination}" + (route.port.nil? ?
'' : ":#{route.port}")
    redirect redirect_path, 302
  else
    halt 404, 'Not found.'
  end
end

¿QUESTIONS?

https://github.com/jmanuzak

Jonathan Manuzak / @jonmanuzak
#ATLRUG / Oct 10, 2012

LINKS
• https://github.com/jmanuzak/cloud_tunnel_redirect

• https://github.com/jmanuzak/cloud_tunnel

• https://github.com/progrium/localtunnel

• http://progrium.com/localtunnel/

• https://showoff.io/

• https://pagekite.net/

• http://daemons.rubyforge.org/

CloudTunnel Atlanta Ruby Users Group October 2012

More Related Content

What's hot (20)

Similar to CloudTunnel Atlanta Ruby Users Group October 2012 (20)

Recently uploaded (20)

CloudTunnel Atlanta Ruby Users Group October 2012

Editor's Notes