undefined | Better HN

0 pointszokier5y ago0 comments

Some sort of LD_PRELOAD style trickery? Or are they intercepting syscalls?

edit: seems nothing that complicated, more like ssh-style tunnel where Boundary has a local listening socket which you need to point the client to. That is if I'm understanding it correctly.

0 comments

armon5y ago

That is correct! The local proxy has a listening socket and handles all the authentication, encapsulation, and forwarding transparently.

parliament325y ago

So does it intercept all connections on that port (from the client app) and pass them along? Or do I need to reconfigure my client application to talk to localhost:whatever? Your only example is that curl using a hostname, it's not really clear.

armon5y ago

You would point the application at the local port. It operates very similarly to SSH port forwarding. No fancy magic to intercept all traffic.

1 more reply

zokierOP5y ago

I started thinking, using network namespaces to intercept traffic from client applications would be pretty neat trick.

j / k navigate · click thread line to collapse

0 pointszokier5y ago0 comments

Some sort of LD_PRELOAD style trickery? Or are they intercepting syscalls?

edit: seems nothing that complicated, more like ssh-style tunnel where Boundary has a local listening socket which you need to point the client to. That is if I'm understanding it correctly.

0 comments

armon5y ago

That is correct! The local proxy has a listening socket and handles all the authentication, encapsulation, and forwarding transparently.

parliament325y ago

armon5y ago

You would point the application at the local port. It operates very similarly to SSH port forwarding. No fancy magic to intercept all traffic.

1 more reply

zokierOP5y ago

I started thinking, using network namespaces to intercept traffic from client applications would be pretty neat trick.

j / k navigate · click thread line to collapse