Buy commercial curl support. We
help you work out your issues, debug your libcurl applications, use the API,
port to new platforms, add new features and more. With a team lead by the
curl founder Daniel himself.
Re: Setting up the user survey 2024
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Patrick Monnerat via curl-library <curl-library_at_lists.haxx.se>
Date: Tue, 7 May 2024 20:41:40 +0200
Le 07/05/2024 à 13:03, Daniel Stenberg a écrit :
> On Tue, 7 May 2024, Patrick Monnerat via curl-library wrote:
>
>> For "Which of these features would you like to see curl support?"
>>
>> - ssh proxy/tunnel
>
> What exactly does this mean though? I've been proxying curl fine
> indirectly over SSH for decades, but I always just run 'ssh -D' to
> create a SOCKS proxy that curl can use...
I was rather thinking of something like 'ssh -L' provides, but without
using intermediate local sockets. There are entry points in libssh and
libssh2 that can be used to implement that feature. It would be very
handy to avoid a parallel ssh process for that, especially if you use
the library rather than the tool. In addition, an hypothetical future
rsync backend would be almost useless (except in unsecured cases)
without it, as rsync standard encryption is provided by ssh, not SSL.
>
>> - proxies stack
>
> Is this not what --preproxy already allows at least with an additional
> proxy? Or do you actually mean even more proxies in the chain? Do you
> (or anyone else) actually have a real use case for this? I have not
> heard of any such.
This would be a generalization of this case, allowing multilevel nested
"tunnelling" with any supporting protocol in any order, each level
adding a layer.
I think cfilters could relatively easily allow it: if we consider SSL as
a pseudo-proxy, https over https tunnel is already a particular case of
a 3-level proxy stack. We could even imagine more "matroska-like"
situations with SOCKS and suggested SSH proxies!
In short, the idea is to bring much of cfilters under user control !
And you may not have heard of it, but YOU spoke of a possible real case
use in a paper I can't find on the net anymore: it was about reaching
your home server from your corporate office network !
Patrick
Date: Tue, 7 May 2024 20:41:40 +0200
Le 07/05/2024 à 13:03, Daniel Stenberg a écrit :
> On Tue, 7 May 2024, Patrick Monnerat via curl-library wrote:
>
>> For "Which of these features would you like to see curl support?"
>>
>> - ssh proxy/tunnel
>
> What exactly does this mean though? I've been proxying curl fine
> indirectly over SSH for decades, but I always just run 'ssh -D' to
> create a SOCKS proxy that curl can use...
I was rather thinking of something like 'ssh -L' provides, but without
using intermediate local sockets. There are entry points in libssh and
libssh2 that can be used to implement that feature. It would be very
handy to avoid a parallel ssh process for that, especially if you use
the library rather than the tool. In addition, an hypothetical future
rsync backend would be almost useless (except in unsecured cases)
without it, as rsync standard encryption is provided by ssh, not SSL.
>
>> - proxies stack
>
> Is this not what --preproxy already allows at least with an additional
> proxy? Or do you actually mean even more proxies in the chain? Do you
> (or anyone else) actually have a real use case for this? I have not
> heard of any such.
This would be a generalization of this case, allowing multilevel nested
"tunnelling" with any supporting protocol in any order, each level
adding a layer.
I think cfilters could relatively easily allow it: if we consider SSL as
a pseudo-proxy, https over https tunnel is already a particular case of
a 3-level proxy stack. We could even imagine more "matroska-like"
situations with SOCKS and suggested SSH proxies!
In short, the idea is to bring much of cfilters under user control !
And you may not have heard of it, but YOU spoke of a possible real case
use in a paper I can't find on the net anymore: it was about reaching
your home server from your corporate office network !
Patrick
-- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2024-05-07