OpenSSH 4.3 released

Posted Feb 2, 2006 12:05 UTC (Thu) by job (guest, #670)
In reply to: OpenSSH 4.3 released by djm
Parent article: OpenSSH 4.3 released

Not "avoid" as in severe punishment, rather as in "don't do it if you can avoid it". It is a layering violation. All uses are inappropriate, unless you are a researcher doing it on purpose. Much like NAT, something you will regret sooner or later, but sometimes necessary to get the work done. A good rule of thumb is to not break principles unless you really understand them.

In the case of TCP-over-TCP the results are also very practical. As soon as you get packet loss performance will quickly deteriorate. The SSH protocol seems like a competent design so I doubt its port forwarding is broken in that regard.

Please don't misunderstand my previous comment as it was a sincere question. The OpenSSH people probably wouldn't design something as broken as PPP-over-SSH (especially not since OpenVPN is such a simple replacement), so I am interested to hear how it works.