Обсуждение: ssh tunneling

Maybe the original message is about SSH proxy instead of tunneling? 

The PostgreSQL protocol makes a SSH upgrade instead of starting the communication with SSH handshake and that is a problem when using some SSH proxies/load balancers which are nowadays common in cloud environments. I also wish there was a way to connect directly to a SSH socket but that is not about the driver but how PostgreSQL communication protocol I guess.

Regards

Jacobo

As Dave mentions, SSH tunneling should work ok. You need to make sure you set up the tunnel correctly. I would suggest testing this using something like netcat to make sure the tunnel is working. If you can connect to netcat with telnet and PostgreSQL is still not connecting then you may want to have a look at your pg_hba.conf configuration to make sure it is set up to accept connections from your SSH server.

 

Jon

 

From: Dave Cramer <davecramer@postgres.rocks>
Date: Tuesday, January 23, 2024 at 4:35 PM
To: Juan Ignacio Fernigrini <juanfernigrini@gmail.com>
Cc: pgsql-odbc@postgresql.org <pgsql-odbc@postgresql.org>
Subject: Re: ssh tunneling

 

 

On Tue, 23 Jan 2024 at 16:06, Dave Cramer <davecramer@postgres.rocks> wrote:

 

 

On Tue, 23 Jan 2024 at 15:28, Juan Ignacio Fernigrini <juanfernigrini@gmail.com> wrote:

Good morning team,

 

I hope this message finds you well.

 

I am tasked with establishing a connection to my database using ODBC with SSH tunneling. Unfortunately, the current ODBC solution is not compatible. I have explored alternatives such as Devart, but it comes at a cost of $250. I am considering whether it would be more beneficial to invest this amount in developing the required feature within the existing open-source ODBC solution.

 

Best regards,
Juan Ignacio Fernigrini

 

I'm not sure why psql odbc would not be able to use ssh tunneling. Can you expand upon that ?

Dave Cramer

www.postgres.rocks

 

see What is an SSH Tunnel & SSH Tunneling? 

 

For details it is not part of the driver.

 

Dave 

 

=?UTF-8?Q?Jacobo_S=C3=A1nchez_L=C3=B3pez?= <jsanchez@denodo.com> writes:
> Maybe the original message is about SSH proxy instead of tunneling?
> The PostgreSQL protocol makes a SSH upgrade instead of starting the
> communication with SSH handshake and that is a problem when using some
> SSH proxies/load balancers which are nowadays common in cloud
> environments. I also wish there was a way to connect directly to a SSH
> socket but that is not about the driver but how PostgreSQL communication
> protocol I guess.

FYI, there's some work going on to make it possible to begin the
connection with an SSL handshake:

https://www.postgresql.org/message-id/flat/CAM-w4HOEAzxyY01ZKOj-iq=M4-VDk=vzQgUsuqiTFjFDZaebdg@mail.gmail.com

If you'd like to see that move along, review and especially
testing of the proposed patch would help make it happen.

            regards, tom lane

Oh, thanks for letting me know.

    That sounds great, will take a look at it. 

Regards

FYI, there's some work going on to make it possible to begin the
connection with an SSL handshake:

https://www.postgresql.org/message-id/flat/CAM-w4HOEAzxyY01ZKOj-iq=M4-VDk=vzQgUsuqiTFjFDZaebdg@mail.gmail.com