Skip to content

tailcat: support SSH local TCP forwarding to loopback - #141

Open
HappyAny wants to merge 1 commit into
tailscale:mainfrom
HappyAny:ssh-loopback-forwarding
Open

HappyAny wants to merge 1 commit into
tailscale:mainfrom
HappyAny:ssh-loopback-forwarding

Conversation

@HappyAny

@HappyAny HappyAny commented Oct 1, 2026 •

Copy link
Copy Markdown

The built-in SSH server does not handle direct-tcpip, so VS Code Remote-SSH cannot connect to its remote server via tailcat.

This adds ssh -L and ssh -D for shell-enabled services, restricted to literal loopback IP addresses such as 127.0.0.1 and ::1. Hostnames, including localhost, are rejected. File-only services and forced commands cannot forward; ssh -R stays disabled. Includes one table-driven test.

Testing:

  • Full Go test suite and go vet ./... passed on current main.
  • An earlier v0.7.0 build of this change was also tested with Windows OpenSSH and VS Code Remote-SSH against Linux, including file saves and terminal commands over DERP with UDP disabled in the test processes.

@HappyAny
HappyAny force-pushed the ssh-loopback-forwarding branch from 7b68d3a to a5f30c3 Compare October 1, 2026 18:25
@HappyAny
HappyAny force-pushed the ssh-loopback-forwarding branch from a5f30c3 to 6afdd14 Compare October 1, 2026 18:53

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant