Cluster Access Tooling Architecture Docs#479
Merged
Merged
Conversation
bastjan
force-pushed
the
cluster-access-tooling
branch
8 times, most recently
from
738f79c to
839d74c
Compare
DebakelOrakel
approved these changes
Apr 24, 2026
bastjan
force-pushed
the
cluster-access-tooling
branch
3 times, most recently
from
628bc20 to
b09f1cd
Compare
simu
reviewed
Apr 27, 2026
bastjan
force-pushed
the
cluster-access-tooling
branch
2 times, most recently
from
e5d6d6d to
572060a
Compare
bastjan
commented
Apr 28, 2026
bastjan
force-pushed
the
cluster-access-tooling
branch
7 times, most recently
from
5dd94f8 to
2ed5190
Compare
simu
reviewed
Apr 28, 2026
bastjan
force-pushed
the
cluster-access-tooling
branch
2 times, most recently
from
c54c338 to
d43f207
Compare
simu
approved these changes
Apr 28, 2026
Member
simu
left a comment
simu
left a comment
There was a problem hiding this comment.
LGTM. Some final comments inline.
bastjan
force-pushed
the
cluster-access-tooling
branch
from
723a2fc to
8fad92f
Compare
bastjan
force-pushed
the
cluster-access-tooling
branch
4 times, most recently
from
a935b42 to
90088dc
Compare
haasad
approved these changes
Apr 29, 2026
simu
reviewed
Apr 29, 2026
bastjan
force-pushed
the
cluster-access-tooling
branch
3 times, most recently
from
17e9f28 to
eb6c435
Compare
Co-authored-by: Simon Gerber <gesimu@gmail.com>
bastjan
force-pushed
the
cluster-access-tooling
branch
from
eb6c435 to
6e9a690
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR proposes tooling to easen cluster access over VSHN jumphosts.
The proposal includes a SOCKS5 proxy routing connections, and cli tooling.
The proxy is designed to stay in the background and be transparent. CLI tools, such as
curl, and browsers can statically add the proxy as a hop.The tooling gets all information from VSHN SSHOP config and the Lieutenant inventory.
Most technical data was verified in the PoC: https://github.com/vshn/kharon