View source for CentOS 7.x Systemd based reverse SSH service

[[Main Page|Home]] > [[CentOS]] > [[CentOS 7.x]] > [[CentOS 7.x Remote access|Remote Access]] > [[CentOS 7.x OpenSSH server|OpenSSH]] > [[CentOS 7.x Systemd based reverse SSH service]]

'''There is newer article on this at [[CentOS 8.x Systemd based reverse ssh tunnel service]]'''

In case anydesk/teamviewer are proving unreliable and reverse ssh is desirable to an internal server behind NAT via a public server, then use following steps to set it up:
* Create ssh-keys '''on both servers'''
* Establish trusted ssh from local server to public server and vice-versa '''on both servers'''
* Create <tt>/etc/systemd/system/files-reverse-ssh.service</tt> with following contents on '''internal server''':
<pre>
     [Unit]
     Description=files-reverse-ssh service
     After=network.target
     
     [Service]
     Type=simple
     ExecStart=/bin/sh /root/files-reverse-ssh.sh
     Restart=always
     User=root
     Group=root
     
     [Install]
     WantedBy=multi-user.target     
</pre>
* chmod 744 /etc/systemd/system/files-reverse-ssh.service
* Create <tt>/root/files-reverse-ssh.sh</tt> with following contents '''on internal server''':
<pre>
     #!/bin/bash
     
     SERVER="files.sunilsanjay.com"
     RPORT=3333
     
     while sleep 60; do
	#Count number of existing connections
	COUNT=$(ps aux | grep root@$SERVER | wc -l)
 	if (( "$COUNT" > 2 )); then
	    echo "SSH already connected, not doing anything extra"
	else
	    # Check SSH Connction is available or not	
	    status=$(ssh -o BatchMode=yes -o ConnectTimeout=30 root@$SERVER echo ok 2>&1)
         
	    #If available connect to remote server
	    if [[ $status == ok ]] ; then
	         echo "Going to start new SSH connection in background"
	         /usr/bin/ssh -o StrictHostKeyChecking=no -o ServerAliveInterval=60 -o ServerAliveCountMax=1 -R $RPORT:127.0.0.1:22 root@$SERVER -N &
	    elif [[ $status == "Permission denied"* ]] ; then
	        echo "Not able to connect due to permission denied error"
	    else
	        echo "Error: $status"
         fi
     fi
     done     
     exit 0
</pre>
* Set required permissions and start service
<pre>
chmod 744 /root/files-reverse-ssh.sh
systemctl daemon-reload
systemctl enable files-reverse-ssh
systemctl start files-reverse-ssh
systemctl status files-reverse-ssh
</pre>


Refer:
* https://unix.stackexchange.com/questions/34004/how-does-tcp-keepalive-work-in-ssh for closing SSH connection if Internet connection is lost.




[[Main Page|Home]] > [[CentOS]] > [[CentOS 7.x]] > [[CentOS 7.x Remote access|Remote Access]] > [[CentOS 7.x OpenSSH server|OpenSSH]] > [[CentOS 7.x Systemd based reverse SSH service]]