Using Core Tunnel app - BlueSkyTools/BlueSkyConnect GitHub Wiki

You can use Core Tunnel app to connect to other devices/services within your Mac client's network.

Often when you manage your clients' infrastructure you also want to access other devices within the clients' networks which are not connected to BlueSkyConnect.

Fo this task you can use the macOS App "Core Tunnel" by Codinn (https://codinn.com/tunnel/)

There you can add a Tunnel Setting for each client network and within this Setting you can specify the different IP Addresses and ports for the services you want to access through the SSH-Tunnel of BlueSkyConnect.

It's possible to do this in Terminal also, but Core Tunnel offers a GUI and is much easier to handle. To Connect to the network, you need a jump host which is a Mac which is connected to BlueSkyConnect. Ideally you also use a key-based SSH Connection to login to the client as it is most seamless.

Add a Tunnel Setting by pressing the plus icon in the Sidebar, enter a Name for the Tunnel Setting and under host enter "localhost" and the blueskyID. Enter the user from the remote Client.

Under Forwarding you can set the different IP-Addresses and Ports that you want to access. enter localhost and a local Port to access the services in the green fields (I recommend sticking to the nomenclature with f.e. 27136 where 136 is the BlueSkyID). In the blue fields you enter the IP-Address and the Port that you want to reach, for example 10.0.2.230 and 443 to reach the web interface of the IP 10.0.2.230.

If you want to access other services on the remote machine itself, you can use localhost and the respective port (5900 in the example for VNC)

Setting 1

On the Connection Tab you need to select your Private Key and enter the user, domain and port for the Jump Proxy, your BlueSkyConnect Server in this case: [email protected]:3122

Setting 2

You also need to edit your .ssh/config and add the settings for your Jump host to use the SSH-Key:

Setting 3

Click save and enable the Tunnel. Then you can enter https://localhost:28136 to access the web interface of the device in the remote network and in ScreenSharing enter localhost:24136 to connect to your client's machine.

You can enable all tunnels simultaneously as long as the local ports don't overlap.