ssh uses TCP, so, yes, you are correct the connection will show as a tcp connection.

I am referring not to the tunnel, but the way the traffic is transported within the tunnel if that makes sense.

My explanation is probably wrong, and it has been some time since I looked at the exact details, and I have seen more then one opinion on the technical details, so I need to apologize for not haveing a better answer or any errors in my understanding.

I would have to refer you to the technical documents, here is one example;

http://www.debian-administration.org/article/Setting_up_a_Layer_3_tunneling_VPN_with_using_OpenSSH

I think the “simple message” is that this protocol is not the same as port forwarding or tunneling over ssh.

I will have to leave the technical details for those who are interested further to review / debate, but if anyone knows a better technical review perhaps they can post back.

http://bodhizazen.net/Tutorials/VPN-Over-SSH/

“”"
#3 This protocol uses udp to transmit tunneled tcp connections resulting in a more stable connection compared with port forwarding (using ssh with the -L or -D options).
“”"

I believe this is incorrect, though I have not read your article in full. If you take a look at netstat, lsof, or tcpdump you should see that all traffic is being tunneled over a single TCP port.

Your idea of using sudo is very clever though, thanks for that, though I would limit the args as well.

I can’t believe I missed this! I’m going to have to do some more reading me thinks….

It might be easier (and possibly slightly faster in use) to use OpenVPN to manage the tunnel connections. It’s obviously a little more work initially, since you’d need to add the OpenVPN package but for a really high speed VPN connection its widely thought of as being the best all-round solution.

Un articolo di qualche giorno fa spiega come configurare una VPN sfruttando il server e il protocollo SSH. Verrà configurata un’interfaccia virtuale chiamata tun0 che per la subnet 10.0.0.0/24 farà transitare il traffico attraverso una connession…