0

I want to have a server where I can connect many computers and open reverse tunnels, and then when I want to connect to those tunnels, I will SSH into the server and forward my local connection to it, therefore not exposing the reverse tunnels to the whole web.

I want this to have snort and fail2ban as well so the idea is to do a docker compose, so I can keep track of everything and I can simply destroy and create this server many times effortlessly on demand.

The question is: is there any problems in having a container with the ssh server? If so, what is the best way to run it safely?

Improve this question

1 Answer 1

Reset to default
0

There are no particular security problems. You have to treat the container with as much care as the host system (keep software up to date, regularly check for known vulnerabilities, make sure the configurations are secure etc.).

However, if you have SELinux installed on your operating system, then you can increase security by confining the container with sVirt. In case the container is compromised, this can prevent attackers from compromising the host system. You could also consider a VM (again combined with sVirt) which provides stronger isolation than a container.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .