SSH direct connection

Hello! First, I'm no sysadmin or anything, so please bear with my ignorance. I'm trying to setup

coder

coder

on my lab's server, and everything has gone great for now, except that I don't seem to be able to establish a direct connection. I connect to the web UI through a SSH tunnel, so for instance the terminal app of my workspace works perfectly fine (from

127.0.0.1:3000/@username/workspace_name.agent_name

127.0.0.1:3000/@username/workspace_name.agent_name

). However, when doing

ssh coder.workspace_name

ssh coder.workspace_name

after a

coder config-ssh

coder config-ssh

in my local terminal, I feel a lot of lag. I confirmed the connection is not direct first with connecting through the VS Code extension --which shows I'm going through a relay-- and running

coder speedtest -d workspace_name

coder speedtest -d workspace_name

, which waits for a direct connection forever. I feel like I'm missing something super simple to solve the issue, but can't figure it out. So if anyone could help, I'd greatly appreciate! Cheers!

Codercord•2/22/24, 5:09 PM

<#1210272211664117810>

**Category**

Help needed

**Product**

Coder OSS (v2)

**Platform**

Linux

Logs

Please post any relevant logs/error messages.

totoloufOP•2/24/24, 11:59 AM

Update: I do get a direct connection from home, but not in the lab when using eduroam, so the issue might come from how eduroam is configured

matifali•2/24/24, 1:49 PM

Coder uses tailscale/wireguard tunnels and should be able to connect directly in most cases but there are certainly cases when it becomes difficult.

cc: @Cian

Cian•2/26/24, 10:43 AM

Eduroam is like a VPN isn't it?

Cian•2/26/24, 10:49 AM

What does your network look like?
Where are you connecting from in relation to your workspace agent?
You might want to read https://github.com/coder/coder/blob/main/docs/networking/index.md and https://github.com/coder/coder/blob/main/docs/networking/stun.md for more details on how the direct connections work, but if you have to do a SSH tunnel to access your Coder instance I think it is likely related to how your network is set up.

Cian•2/26/24, 11:01 AM

should show some useful information

CCian Eduroam is like a VPN isn't it?

Phorcys•2/27/24, 6:33 AM

Eduroam is some school/univ-related Wi-Fi setup

Phorcys•2/27/24, 6:33 AM

I don't really know what's special about it but i do remember it's pretty heavily gated

Phorcys•3/8/24, 7:40 PM

hey @totolouf, did you get this sorted out ?

ajeygore•3/12/24, 7:15 AM

Hi Folks, I am looking for one more question on SSH, I wanted to use mosh instead of ssh, but it does not look like I can do that? Also, is there anyway, I can login to ssh from ipad.- because I can’t configure coder there

ajeygore•3/12/24, 7:16 AM

hey @totolouf did you get this working?

Aajeygore Hi Folks, I am looking for one more question on SSH, I wanted to use mosh inste...

Phorcys•3/12/24, 5:31 PM

you can't really do that but anyways Mosh is really really outdated so I wouldn't recommend it

Phorcys•3/12/24, 5:32 PM

Coder's SSH goes through Tailscale to achieve p2p to your workspace even in different networks so the latency is very good

Phorcys•3/12/24, 5:32 PM

I have used it outside on the bus and only had minor latency issues

ajeygore•3/14/24, 5:20 AM

@Phorcys Thanks for clarification, I read through wireguard and tailscale, I think I am dropping the idea of using mosh.

ajeygore•3/14/24, 5:21 AM

But is there any way for us to share config so that i can ssh from ipad? or using web terminal is the only way to go?

Aajeygore But is there any way for us to share config so that i can ssh from ipad? or usin...

Phorcys•3/14/24, 6:44 AM

using web terminal, web vscode or Coder CLI if you can install it in iSH

Phorcys•3/14/24, 6:44 AM

https://ish.app

iSH

iSH is a project to get a Linux shell environment running locally on your iOS device, using a usermode x86 emulator.

ajeygore•3/14/24, 7:08 AM

I am using blinkshell. But since I don’t have coder agent on ipad - I am trying to figure out how do i ssh into my workspace

Aajeygore I am using blinkshell. But since I don’t have coder agent on ipad - I am trying ...

Phorcys•3/14/24, 11:11 AM

you can retrieve the CLI from https://github.com/coder/coder/releases/tag/v2.9.0

GitHub

Release v2.9.0 · coder/coder

Changelog
BREAKING CHANGES

Remove prometheus-http port declaration from coderd service spec (#12214) (@johnstcn)
Provisioners: only allow untagged provisioners to pick up untagged jobs (#12269) (@...

Phorcys•3/14/24, 11:11 AM

get the .tar.gz file for your architecture, probably arm64 or armv7 depending on your device

Phorcys•3/27/24, 7:46 PM

hey @ajeygore, did you figure this out ?

ajeygore•4/9/24, 2:05 AM

Yes, finally I have a solution, I am using incus + coder. Incus provides me with LXC containers, they mostly behave like VMs, so that’s great, then I am using incus + docker template, so instead of docker in docker, I am using LXC + Docker. Given that, I can use tailscale vpn to get direct access to LXC containers and thus I can login from my iPad directly without coder cli.,

ajeygore•4/9/24, 2:06 AM

This is a good solution, For now.

ajeygore•4/9/24, 2:08 AM

There should be a way to directly access my workstation over ssh (people like me who love to work on ssh) but without any cli installation, or if I want to share my machine’s ssh to someone and then can share the screen using tmux