Automatic SSH Proxy

Motivation and Features

There are various reasons to use a proxy server for browsing web pages. For example, to use a VPN for security purposes or to use an internal proxy to connect to a company's network. However, these configurations can be cumbersome and may require expensive solutions. Additionally, when using a VPN, all traffic on the PC is routed through the proxy server, which may not always be desirable.

SOCKS proxy is one method to allow only browser communications to pass through a proxy server. Unlike typical VPNs, it is possible to use the proxy without special network equipment as long as the network is capable of TCP/IP communication. OpenSSH, a standard SSH implementation, has a feature to use a SOCKS proxy, and those who can use OpenSSH can use it for free.

The above figure shows a typical configuration using a SOCKS proxy. First, you open a shell and start the SSH client to establish an SSH connection. At this time, you enable the SOCKS option flag and make the SSH client work as a SOCKS server. Then, you change the settings in Firefox to communicate through the SOCKS proxy. Such configuration is cumbersome and, since only one SSH server can be used, you need to change the settings every time you want to use a different SSH server.

I don't think it's kind to humans.

Automatic SSH Proxy automates the configuration of SOCKS proxy, eliminating the need for users to manually set it up. Once the configuration is done, the plugin will establish an SSH connection automatically, and Firefox will communicate through the SOCKS proxy seamlessly. Additionally, Automatic SSH Proxy uses pattern matching to select the appropriate SSH server when multiple servers are available. Of course, it is also possible to configure it to connect directly without using a proxy.

Automatic SSH Proxy's automatic proxy enables virtual on-browser routing. By preparing SSH servers that can connect to remote private networks and setting up appropriate matching patterns, it automatically routes browser communications securely. It allows flexible configuration using network specifications in CIDR notation and pattern matching with wildcards. With this, you can utilize a remote private network as if it were available locally, ensuring security and convenience without the need for complex network infrastructure.

This plugin is useful in the following situations:

• Operate web-based consoles running on powerful computers in remote locations (such as JupyterLab or TensorBoard)
• Connect to the management interface of network devices from remote locations
• Access web pages with network restrictions using strong authentication via SSH from the Internet