New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support managed connection via SSH tunnel #985

Closed

dguggemos opened this issue Feb 26, 2021 · 1 comment · Fixed by #1020

Labels

CQ

Milestone

Contributor

dguggemos commented Feb 26, 2021

Add support for connecting to an external system from Ditto via an SSH tunnel.

Member

thjaeckle commented Feb 26, 2021

Created CQs for "sshd" library to be used for this (clealydefined score is only 72):
https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23086
https://dev.eclipse.org/ipzilla/show_bug.cgi?id=23087

thjaeckle added the CQ label

dguggemos pushed a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985: Add model for ssh tunnel

6e4aa51

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

dguggemos pushed a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985: Fix test error

5a71c07

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

dguggemos pushed a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985: Formatting

bdf16ca

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

dguggemos pushed a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985: Add test for new credential types

e2af8c3

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 Add support to establish a connection via an ssh tu…

08004b2

…nnel. Ssh tunnel management is done in new SshTunnelActor. The tunnel is controlled (open/close) with the existing state machine in BaseClientActor. Add connecting via tunnel for existing protocols (except Kafka, which requires multiple connections to bottstrap server and zookeeper).

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos pushed a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985: Fix extraction of known hosts

2effbd9

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 fix handling of error on initial mqtt connection, e…

6a1a5b5

…stablish ssh tunnel when testing a connection

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 review addition of ssh tunnel to connection model, …

6e7a701

…add username to ssh public key credentials

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 apply public key credentials for ssh tunnel

41f0fef

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 simplify fingerprint verification

cc80346

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 fix loading of public key and move context informat…

4d1b7f8

…ion for parsing errors to ExceptionMapper

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 fix KafkaClientActorTest

1a5c8c2

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add validation of ssh tunnel configuration

4ecb547

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add javadoc, more logging

a534c07

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 set supported client side user auth method

685e9df

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 set exclusive public key/password identity on ssh s…

40ffaee

…ession (no default fallbacks)

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 rename SshPublicKeyCredentials

fa60833

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 use default mqtt connect and socket timeout

970dc9d

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 limit supported ssh client authentication methods g…

dce01a4

…lobally

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 provide exception class name if exception message i…

ae095b6

…s null in connectivity error responses

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add some javadoc, remove TODO

f9e0203

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 document ssh tunneling feature

d34a43d

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 move tunneling doc to separate section and refer to…

4cb49fb

… it from basic section

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 reject ssh tunneling for kafka connections

2b49516

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add reference to SSH RFC and hint about possible pe…

79f6477

…rformance impact of using ssh tunneling

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 fix message format of connection logs

5703e35

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos pushed a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add comment

0de15d1

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add missing javadoc, remove debug log statements

cc4d81d

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add missing javadoc

b451b3b

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 minor documentation fixes

28896ff

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 improve exception message if tunnel actor is starte…

77aefe0

…d without required configuration, restart tunnel actor in case of an unexpected failure

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 also validate ssh host, extract HostValidator inter…

29d4133

…face to improve testability

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 add note about security considerations when using s…

e6795ab

…sh tunneling

Signed-off-by: Dominik Guggemos <dominik.guggemos@bosch.io>

dguggemos pushed a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 Fix copyright header

6818a55

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

dguggemos mentioned this issue

Add support for connecting to an external system via an SSH tunnel #1020

Merged

dguggemos added this to the 2.0.0 milestone

dguggemos pinned this issue

dguggemos unpinned this issue

VadimGue added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 Add blog post for SSH tunnel for managed connections

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

VadimGue added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 Add @SInCE tag

c825dd7

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

VadimGue added a commit to bosch-io/ditto that referenced this issue


          eclipse-ditto#985 Add blog findings

9b4ff3f

Signed-off-by: Vadim Guenther <vadim.guenther@bosch.io>

thjaeckle closed this as completed in #1020

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment