egutierrez
cfdf515228
- .claude/CLAUDE.md - .claude/commands/subagentes.md - .claude/rules/INDEX.md - .mcp.json - bash/functions/cybersecurity/analyze_dns.md - bash/functions/cybersecurity/audit_http_headers.md - bash/functions/cybersecurity/audit_ssh_config.md - bash/functions/cybersecurity/check_firewall.md - bash/functions/cybersecurity/detect_suspicious_users.md - bash/functions/cybersecurity/encrypt_file.md - ... Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
50 lines
1.6 KiB
Markdown
50 lines
1.6 KiB
Markdown
---
|
|
name: ssh_tunnel_open
|
|
kind: function
|
|
lang: go
|
|
domain: infra
|
|
version: "1.0.0"
|
|
purity: impure
|
|
signature: "func SSHTunnelOpen(conn SSHConn, localPort int, remoteHost string, remotePort int) (int, error)"
|
|
description: "Abre un tunel SSH (local port forwarding) en background. Retorna el PID del proceso para cerrarlo despues."
|
|
tags: [ssh, tunnel, port-forwarding, remote, pendiente-usar]
|
|
uses_functions: []
|
|
uses_types: [ssh_conn_go_infra]
|
|
returns: []
|
|
returns_optional: false
|
|
error_type: "error_go_core"
|
|
imports: [fmt, os/exec, strings, time]
|
|
params:
|
|
- name: conn
|
|
desc: "estructura SSHConn con Host, User, Port, IdentityFile"
|
|
- name: localPort
|
|
desc: "puerto local donde escuchar conexiones"
|
|
- name: remoteHost
|
|
desc: "host remoto accesible desde el servidor SSH"
|
|
- name: remotePort
|
|
desc: "puerto en el host remoto"
|
|
output: "PID del proceso ssh del tunel para cerrarlo despues"
|
|
tested: true
|
|
tests: ["abre tunel y lo cierra"]
|
|
test_file_path: "functions/infra/ssh_tunnel_test.go"
|
|
file_path: "functions/infra/ssh_tunnel_open.go"
|
|
---
|
|
|
|
## Ejemplo
|
|
|
|
```go
|
|
conn := SSHConn{Host: "bastion.example.com", User: "deploy"}
|
|
// Tunel: localhost:5432 -> db-server:5432 via bastion
|
|
pid, err := SSHTunnelOpen(conn, 5432, "db-server", 5432)
|
|
if err != nil {
|
|
log.Fatal(err)
|
|
}
|
|
fmt.Println("tunnel PID:", pid)
|
|
// Usar localhost:5432 para conectar a la BD remota
|
|
// Cerrar con SSHTunnelClose(pid)
|
|
```
|
|
|
|
## Notas
|
|
|
|
Usa ssh -N -f -L para crear el tunel en background. ExitOnForwardFailure=yes falla inmediatamente si el puerto local esta ocupado. remoteHost vacio se interpreta como "localhost" (el servidor SSH mismo). El PID se obtiene buscando el proceso ssh en la tabla de procesos.
|