how to vpc proxy

HOW_TO_USE_A_SOCK5_PROXY.md

🔌 Step 1: SSH-Add to set up the ssh-agent to use your ssh key

ssh-add -l /path/to/id_rsa # or /path/to/id_ed25519

🛰️ Step 2: Open an SSH SOCKS Proxy Tunnel (localhost-only)

# Establish SOCKS5 proxy on localhost:1080 via the VPC bastion server
# This tunnel makes your local machine behave as if it has a "network cable"
# plugged directly into the VPC (10.15.0.0/16) — but only for apps configured
# to use this proxy.
ssh -D 1080 [email protected]

---

🔌 Step 3 (Optional): Route Commands or Tools Through the Tunnel

# Example: Use curl over the tunnel to reach a private IP in the VPC
curl --socks5 127.0.0.1:1080 http://10.15.3.42

# Example: Launch your devbox container and configure tools inside to use proxy
# (Note: docker itself won’t auto-proxy — apps inside must be proxy-aware)
docker run -it --rm jpalala/joesdevenv
# Inside container, set proxy manually when needed:
export ALL_PROXY=socks5://127.0.0.1:1080

---

🔍 Visual Overview

┌────────────┐         SSH Tunnel (-D)          ┌───────────────────────┐
│ Your Host  │────────────────────────────────▶│ Bastion Server        │
│ (Windows / │  SOCKS5 on 127.0.0.1:1080        │ bastion.vpc.example.com│
│  Devbox)   │                                  └────────┬───────────────┘
└────┬───────┘                                           │
     │  All proxied traffic goes through tunnel          │
     └───────────────────────────────────────────────────┘
                           Access to VPC-only IPs
                           e.g. 10.15.0.0/16

vpc-proxy.sh

#!/usr/bin/env bash
# ===============================
# SSH Proxy / Tunnel Helper Script
# Usage:
#   ./vpc-proxy.sh socks user@host      -> Creates a SOCKS5 proxy at localhost:1080
#   ./vpc-proxy.sh vpn user@host 10.0.0.0/16  -> Full VPN-like routing via sshuttle
# ===============================

MODE="$1"
TARGET="$2"
SUBNET="$3"

if [[ "$MODE" == "socks" ]]; then
  echo "[*] Starting SOCKS proxy on localhost:1080 ..."
  ssh -D 1080 -q -C -N "$TARGET"

elif [[ "$MODE" == "vpn" ]]; then
  if [[ -z "$SUBNET" ]]; then
    echo "Usage: ./vpc-proxy.sh vpn user@host <subnet>"
    exit 1
  fi
  echo "[*] Starting full-network tunnel via sshuttle ..."
  sshuttle -r "$TARGET" "$SUBNET"

else
  echo "Usage:"
  echo "  ./vpc-proxy.sh socks user@host"
  echo "  ./vpc-proxy.sh vpn user@host <subnet>"
fi