Linux IP Bridging over SSH tunnel?

[fuxxociety]

I've got a server behind a buddy's firewall that only has one outgoing port open for my server. I can ssh OUT of this port to my home gateway, but I can't SSH in from the internet.

How can I set up an IP bridge from his network to mine so that he can take advantage of my FIOS?

 

[yinan]

This wouldnt be a bridge, but more of a VPN.

 

[fuxxociety]

Not really sure of the correct terminology. He basically wants to have a subnet on his network where all attached PCs go to me, with no NAT in between. Requests are sent over to my network where they are handled by my router as if they were on my local net.

 

[yinan]

That is a layer 2 VPN and it is best handled by a hardware device such as something Cisco makes.

 

[drebo]

Not really sure of the correct terminology. He basically wants to have a subnet on his network where all attached PCs go to me, with no NAT in between. Requests are sent over to my network where they are handled by my router as if they were on my local net.

You do realize that without a direct connection, his speed will still be limited by HIS internet service, right?

Otherwise, run a hard line or employ a wireless bridge between the two physical networks and either use an IP router (not a NAT router) or simply point some devices to your gateway and some devices to his own gateway.

But, if you're using a VPN, and not physically connecting the networks (via wireless or cable), his speed will still be limited by his own internet connection.

 

[fuxxociety]

I understand, and have informed him of this. He replies he's not looking for speed, but latency.

 

[drebo]

Explain to him that his latency will not go down if he has to travers first his ISP to get to you, and then again traverse your ISP to get to the internet.

Latency goes UP with the number of hops, even if some of those hops have much faster connections than your own. VPNing to you, and then going out to the net, is likely to double his latency. Not to mention the increased serialization delay from whatever protocol headers must be added to the packets.

If he's trying to speed his connection up in any way by first connecting to you, it's just not going to happen.

 

[fuxxociety]

That's what I thought, but he reminded me of the proxying services for games like lowerping.. You're saying those are pointless?