Question:

How can I encrypt an orb connection or tunnel one through a secure session?

Answer:

Orb connections may be tunneled through an encrypted connection via the ssh port-forwarding mechanism. In addition to providing the encryption, this is useful in making a remote orb, running on a machine to which you have access, appear to be on a local port.

The steps are:

1) Open one ssh connection to a remote computer via

See also

• Brtt:Templates
• Help:Template
• Brtt:Userboxes
• Template talk:Navigation2

</noinclude> This tunnels the standard orb port (#6510) on yukon to port 3080 on localhost. Make sure to use a port number that is not privileged or otherwise in use on the local machine.

2) Keeping that connection open, in a different shell run your standard orb commands on the remapped port. For example:

See also

• Brtt:Templates
• Help:Template
• Brtt:Userboxes
• Template talk:Navigation2

</noinclude> The disadvantages are that most ssh implementations will probably not reconnect a dropped session. The advantage is that you can get access to one of your orbs from a roaming machine, such as a laptop, without having to constantly log in to your home machine and reconfigure the orb connect permissions for whatever dynamic address you've been assigned at the moment.

Thanks to Cooper Nelson for explaining how to get this to work.