HomePhabricator

Document even more ways to manage `sshd` ports

Description

Document even more ways to manage sshd ports

Summary: Fixes T11882. Document using ~/.ssh/config to mitigate the inconvenience of port 2222.

Test Plan: Read document.

Reviewers: chad

Reviewed By: chad

Maniphest Tasks: T11882

Differential Revision: https://secure.phabricator.com/D16894

Event Timeline

csilvers added inline comments.
/src/docs/user/userguide/diffusion_hosting.diviner
250โ€“253

I must be missing something, but I don't really understand how this works. What if you need to log in to administer the machine? -- how do you get to the sshd that's on port 22?

290โ€“303

Yay! Joke insertion complete!

/src/docs/user/userguide/diffusion_hosting.diviner
250โ€“253

I administrate secure.phabricator.com by connecting to secure001.phacility.net or secure002.phacility.net (e.g., from inside the VPC).

secure.phabricator.com hits an externally-facing load balancer (slb001.phacility.net).

(We also happen to have moved the ports in this case, but didn't need to. The repo tier runs administrative SSH on 22 and repository services on 2223.)

You'd have to do this anyway if you're putting more than one host behind the LB, so this is just a half-step toward that.