Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Specify hostname in client mode #33

Closed
undirectlookable opened this issue May 24, 2017 · 4 comments
Closed

Specify hostname in client mode #33

undirectlookable opened this issue May 24, 2017 · 4 comments

Comments

@undirectlookable
Copy link

undirectlookable commented May 24, 2017

I'm using nginx to proxy requests to chisel, there are several benefits if users can change the hostname of server address

  • proxy by any hostname you want, without register a domain or change DNS records. Useful when you have lots of chisel backends with one entry server.
  • no DNS query (which is clear text) was sent, man-in-the-middle could not get the hostname, it's more secure.

Probable usage:

$ chisel client --hostname mydomain.com https://1.2.3.4 3000

the --hostname parameter will override the default server hostname.

@connesc
Copy link

connesc commented May 24, 2017

Note that eliminating the DNS query has no security benefit since the hostname is always sent as clear text anyway (either HTTP headers or SNI for HTTPS).

Also, for the other point, I guess that this is a rather unusual use case. I would suggest to either configure custom entries in /etc/hosts or setup a local DNS server like dnsmasq.

@undirectlookable
Copy link
Author

Thanks for the reply. My case is really unusual, and I can use different location to proxy to different chisel backend in nginx config. Maybe It's better to keep the tool simple and easy. 🙂

@connesc
Copy link

connesc commented May 25, 2017

This sounds like a good idea.
What's more, this setup allows to actually hide your chisel endpoints by adding SSL/TLS. 😉

@shellster
Copy link

An alternative reason for this feature would be to support Domain-Fronting as a way to evade detection by certain countries (China).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants