SNI-like routing

Brian Candler b.candler at pobox.com
Mon Sep 26 20:21:36 AEST 2022


On 26/09/2022 10:48, SERVANT Cyril wrote:
> And then, in /etc/sshproxy/sshproxy.yaml :
>
> users:
> 	- foo
> 		routes:
> 			default:
> 				dest: [ip.of.foo.vm]
> 	- bar
> 		routes:
> 			default:
> 				dest: [ip.of.bar.vm]

FWIW, that isn't valid YAML <http://www.yamllint.com/>, but it's OK once 
you add a colon after each username.

users:
         - foo:
                 routes:
                         default:
                                 dest: [ip.of.foo.vm]
         - bar:
                 routes:
                         default:
                                 dest: [ip.of.bar.vm]

Regards,

Brian.

P.S. I can't see why the YAML config uses an extra level of object 
nesting.  I would have expected the top level to be either a list (of 
rules to be tried in sequence):

---
users:
   - username: foo
     routes:
       default:
         dest: [ip.of.foo.vm]
   - username: bar
     routes:
       default:
         dest: [ip.of.bar.vm]

or an object (for direct lookup of username into a map):

---
users:

   foo:
     routes:
       default:
         dest:  [ip.of.foo.vm]

   bar:
     routes:
       default:
         dest: [ip.of.bar.vm]



More information about the openssh-unix-dev mailing list