DD-WRT using SSH Tunnel - Port 22

[urbanconcrete 14]

Short question, probably short answer...

Can i use the ssh tunnel port 22 protocol with a dd-wrt router?

 

Thanks!

[A340 2]

I will also like to know the answer to this question.. much appreciated..

 

 

A340

[go558a83nk 371]

If you can get something like optware installed then you should be able to run it.

 

I have optware installed on my asus ac68 with merlin firmware onto a USB memory stick.  I had to install bash and openssh with ipkg.  Bash runs the script, openssh is called therein.

 

So far no problems connecting and with stability, but speeds are much slower than "naked" openvpn run with the same router.  Not slower because of CPU usage but because it's a TCP connection I surmise.

 

If the staff are watching, is TCP required for ssh tunnel setup?  sorry if a dumb question.

[Staff 10118]

  On 9/17/2014 at 3:56 AM, go558a83nk said:

If the staff are watching, is TCP required for ssh tunnel setup?  sorry if a dumb question.

 

Hello!

 

Yes, it is mandatory, no UDP support by SSH as you can imagine. So you have overhead by additional SSH tunnel and on top of that OpenVPN forced to work in TCP mode (which, for how OpenVPN works, will be slower and less efficient than UDP). You should never use this mode unless you absolutely need it for some reason (for example to bypass OpenVPN disruption or extreme shaping).

 

Kind regards

[go558a83nk 371]

  On 9/17/2014 at 8:30 AM, Staff said:

 

  On 9/17/2014 at 3:56 AM, go558a83nk said:

If the staff are watching, is TCP required for ssh tunnel setup?  sorry if a dumb question.

 

Hello!

 

Yes, it is mandatory, no UDP support by SSH as you can imagine. So you have overhead by additional SSH tunnel and on top of that OpenVPN forced to work in TCP mode (which, for how OpenVPN works, will be slower and less efficient than UDP). You should never use this mode unless you absolutely need it for some reason (for example to bypass OpenVPN disruption or extreme shaping).

 

Kind regards

 

LOL, so it was a dumb question.  But, I'm no expert....

 

Here in Thailand they have apparently made VPN usage illegal because they want to monitor heavily.  Thus my attempt to hide my use of openvpn by ssh tunnel.

 

if my routing to the singapore servers was proper I think the ssh tunnel would work just fine because the latency would be low.  But, the lowest latency server to me is 240ms and up and depends on the time of day.  TCP just doesn't work well at those latencies.

[Staff 10118]

  On 9/17/2014 at 10:31 AM, go558a83nk said:

Here in Thailand they have apparently made VPN usage illegal because they want to monitor heavily.  Thus my attempt to hide my use of openvpn by ssh tunnel.

 

 

Hello!

 

That's the right decision then.

 

Try OpenVPN over SSL as well. It might work better than over SSH, because from other reports from Thailand it is possible that SSH is shaped much more than SSL to port 443. Also try the Hong Kong server, just in case.

 

Kind regards

[9pF7d2BTMF3hZ1i1NonmpfRnH 1]

Is there a way to setup SSL VPN on DD-WRT?

[go558a83nk 371]

  On 9/17/2014 at 3:55 PM, 9pF7d2BTMF3hZ1i1NonmpfRnH said:

Is there a way to setup SSL VPN on DD-WRT?

 

yes, with optware and installing stunnel.

[urbanconcrete 14]

  On 9/18/2014 at 10:58 AM, go558a83nk said:

yes, with optware and installing stunnel.

Links are sometimes helpful...

 

https://www.datenzone.de/blog/2012/01/installing-stunnel-on-openwrt/

 

Do you only have to install stunnel and download the ssh-vpn file?

[go558a83nk 371]

  On 9/18/2014 at 1:17 PM, urbanconcrete said:

 

  On 9/18/2014 at 10:58 AM, go558a83nk said:

yes, with optware and installing stunnel.

Links are sometimes helpful...

 

https://www.datenzone.de/blog/2012/01/installing-stunnel-on-openwrt/

 

Do you only have to install stunnel and download the ssh-vpn file?

 

for stunnel it's the ssl configuration.  it's pretty simple and ipkg should install any dependencies (for stunnel) that aren't already installed.  you just have to use the proper ovpn config for openvpn in conjunction.