search

aws / amazon-ssm-agent

An agent to enable remote management of your EC2 instances, on-premises servers, or virtual machines (VMs).
https://aws.amazon.com/systems-manager/
Apache License 2.0
1.06k stars 324 forks source link

Squid proxy for outbound traffic of ssh tunnel via ssm agent #583

Open chary1112004 opened 3 months ago

chary1112004 commented 3 months ago

Hi,

We are setting up ssh tunnel via ssm agent in bastion host to connect resource in private subnet. With ssh tunnel, from browser we configure socks5 to access private resource, however we could also access to unexpected page. We would like to control from browser only some whitelist domains are allowed via squid proxy similar this one for whole server by configure proxy in /etc/environment https://aws.amazon.com/blogs/networking-and-content-delivery/providing-controlled-internet-access-through-centralised-proxy-servers-using-aws-fargate-and-privatelink/.

We follow the guide https://docs.aws.amazon.com/systems-manager/latest/userguide/configure-proxy-ssm-agent.html to configure proxy for ssm however from browser, we still access unexpected pages.

Any suggestion to resolve this issue would be very much appreciated!

Thanks!

Aperocky commented 1 month ago

Can you elaborate to the nature of the "unexpected pages", are these resources within the private subnet that you own or is it in the public internet?