Feature request: virtual servers

Philipp Marek philipp.marek at linbit.com
Thu Apr 26 16:34:32 EST 2012


On Thursday, 26. Apr 2012, Darren Tucker wrote:
> On Thu, Apr 26, 2012 at 09:34:53AM +1000, Damien Miller wrote:
> > On Wed, 25 Apr 2012, Philipp Marek wrote:
> > > So I'd like to ask for the "Match" statements to allow matching the
> > > accepting port number and/or IP address.
> > 
> > I think Darren had a pending patch for this. Darren?
> 
> Here's the diff (I haven't looked at in a while, but it should apply
> cleanly to 6.0.  It still builds OK).
> 
> It adds "Match LocalAddress" and "Match LocalPort" which does pretty
> much what it says on the tin.
Hey, that's great!

Could you put that in OpenSSH, so that -portable and the distributions can 
pick that up sometime?


>> sshd doesn't support varying the host keys based on local or
>> remote address/port now and it's probably not something we're
>> interested in supporting in the future (it would add quite a
>> bit of complexity for something that can be achieved by
>> running multiple instances).
Understood.
For the service-IP address with failover it's not a problem to start a new 
SSHd; the only nice thing would be an "Include" statement, so that this 
instance only has definitions like

	HostKey ...
	HostKey ...
	HostKey ...
	Include /path/to/common/config


Thank you very much!


Regards,

Phil

-- 
: Ing. Philipp Marek
: LINBIT | Your Way to High Availability
: DRBD/HA support and consulting                 http://www.linbit.com :

DRBD® and LINBIT® are registered trademarks of LINBIT, Austria.


More information about the openssh-unix-dev mailing list