ProxyCommand as both a resolver and connector

Damien Miller djm at
Thu Mar 27 11:37:54 EST 2014

On Sun, 23 Mar 2014, Igor Bukanov wrote:

> I see that the hostname canonicalization configuration options is still
> rather limited. As that works on DNS level they are of not use if one has
> to use ProxyCommand to connect over a proxy connection or through a common
> gateway name where one uses different port numbers to connect to different
> intranet names.
> What would be ideal is to extend the ProxyCommand to both return the
> resolved universal name for the given short name and to connect to that
> universal name. For example, the proxy can first print the resolved name on
> its stdout before proceeding with other data.

It's an interesting idea, probably best used in conjunction with the fd-
passing proxy mode. I don't know if I'm interested enough to implement it
myself, but you should file an enhancement bug at so it doesn't get lost.


More information about the openssh-unix-dev mailing list