t7tran/ssh-tunneling repository overview

mkdir ./opt
ssh-keygen -f ./opt/ssh_host_rsa_key -N '' -t rsa
ssh-keygen -f ./opt/id_rsa -N '' -t rsa
chmod 644 ./opt/ssh_host_rsa_key
cp ./opt/id_rsa.pub ./opt/authorized_keys

docker-compose up -d

ssh -i ./opt/id_rsa -L 8080:httpbin.org:80 -N -p 2222 tunneling@localhost
curl -fsL http://localhost:8080/get # allowed
ssh -i ./opt/id_rsa -L 8080:httpbin.org:80 -N -p 2223 tunneling@localhost
curl -fsL http://localhost:8080/get # allowed

ssh -i ./opt/id_rsa -L 8080:bot.whatismyipaddress.com:80 -N -p 2222 tunneling@localhost
curl -fsL -H 'Host: bot.whatismyipaddress.com' http://localhost:8080 # allowed
ssh -i ./opt/id_rsa -L 8080:bot.whatismyipaddress.com:80 -N -p 2223 tunneling@localhost
curl -fsL -H 'Host: bot.whatismyipaddress.com' http://localhost:8080 # allowed

ssh -i ./opt/id_rsa -L 8080:ipv4bot.whatismyipaddress.com:80 -N -p 2222 tunneling@localhost
curl -fsL -H 'Host: ipv4bot.whatismyipaddress.com' http://localhost:8080 # allowed
ssh -i ./opt/id_rsa -L 8080:ipv4bot.whatismyipaddress.com:80 -N -p 2223 tunneling@localhost
curl -fsL -H 'Host: ipv4bot.whatismyipaddress.com' http://localhost:8080 # disallowed