constellation VS ngrok

A lot happening in Europe, Enclaive provides encrypting containers (GitHub), Edgeless Systems provides a whole encrypted k8s with constellation (GitHub), then there are other players like scontain and secustack.

Aber schau dir bspw mal https://github.com/edgelesssys/constellation an.

Would smth. like https://github.com/edgelesssys/constellation be helpful for those cases?

Hey u/Aztreix, we've recently released an open-source Kubernetes distribution that keeps all data always encrypted and isolates your workloads from cloud infrastructure. This solves many compliance requirements, at least for European companies. Feel free to check it out: https://github.com/edgelesssys/constellation.

Maybe they should deploy it via Constellation https://github.com/edgelesssys/constellation

Easy! I recently posted about our open-source project Constellation. Constellation is the first confidential Kubernetes distribution. Think Rancher Kubernetes Engine (RKE) or RedHat OpenShift for confidential computing.

Therefore, having such verifiable infrastructure seems paramount for a zero trust architecture. Constellation (https://github.com/edgelesssys/constellation) for example leverages Confidential Computing hardware to provide a fully-verifiable Kubernetes cluster. (Disclaimer: I work on that project)

Constellation does this as well btw: https://github.com/edgelesssys/constellation Disclaimer, I work on the project.

ngrok 1.0 - Original version of ngrok. No longer developed in favor of the commercial 2.0 version.

Thanks for the history. I maintain this list[0], and wasn't aware of OG localtunnel, likely because there's a somewhat newer and now more popular project with the same name[1]. You appear to be correct on timing. Here's the earliest commits on GitHub for each of the projects:

OG localtunnel (2010): https://github.com/progrium/localtunnel/tree/fb82920d9d3e538...

Other localtunnel (2012): https://github.com/localtunnel/localtunnel/tree/93d62b9dbb9f...

ngrok (2012): https://github.com/inconshreveable/ngrok/tree/8f4795ecac7f92...

I'll see that OG localtunnel gets added to the list for posterity.

[0]: https://github.com/anderspitman/awesome-tunneling

[1]: https://github.com/localtunnel/localtunnel

ngrok

if you're worried about the line "ngrok captures and analyzes all traffic over the tunnel for later inspection and replay" in https://github.com/inconshreveable/ngrok, I'd say that's a valid concern but not for ssh if you make sure the client knows what the host key is and does not accept a different one

Looks like it's open source so it could be just a fork away https://github.com/inconshreveable/ngrok

To get a fix domain, we can deploy HTTP tunnel in our own server. ngrok also provides an open source version for server side deployment. But it is old 1.x version and not recommended to deploy at production with some serious reliability issues.

I ended up inspired by ngork structure here: https://github.com/inconshreveable/ngrok it doesn't really work well with go modules, since i will end up running project like this:

Maybe https://github.com/inconshreveable/ngrok/issues/408

In Go, inconshreveable/ngrok and coyove/goflyway is well known, especially ngrok is popular among developers as a SaaS service.