Fully featured low overhead profiler for Java EE and Java SE platforms.
Ultimate profiling and monitoring solution for Gradle, Maven, Ant, JUnit and TestNG.
Easy to use performance and memory profiler for .NET framework.

Restrict connections to SSH

Moderators: Vladimir Kondratyev, Anton Katilin

Restrict connections to SSH

Postby Nomburs » Thu Jun 30, 2016 8:18 pm

Hello,

I have noticed there is support for connecting to the remote YourKit application via SSH. By default this is allowed, though insecure and unauthenticated connections are able to connect too simply by entering the IP and nothing else. Is there anything I can do to restrict connections to YourKit to only allow SSH authenticated clients?

Thanks!
Nomburs
 
Posts: 2
Joined: Thu Jun 30, 2016 8:02 pm

Re: Restrict connections to SSH

Postby Anton Katilin » Thu Jun 30, 2016 9:06 pm

Hello,

In short: there is no built-in support for that in the profiler agent, but you can achieve this by restricting access to the agent port. For detail see below.

The profiler agent listens on a network socket on given port:
https://www.yourkit.com/docs/java/help/ ... s.jsp#port

SSH support is not built-in. Instead, the SSH tunneling support you mentioned is the profiler UI's feature intended to simplify remote connections when the profiler agent port is not directly accessible at the remote host.

The only things you can tweak at the agent side is to specify startup options "listen" or "onlylocal" -- please find their description via the link above.

You can use a firewall to restrict access to the agent port(s) at the remote host from outside. As the result, the only possible way to connect to a profiling application running of the host will be to use an SSH tunnel.

Best regards,
Anton
Anton Katilin
 
Posts: 5575
Joined: Wed Aug 11, 2004 8:37 am

Re: Restrict connections to SSH

Postby Anton Katilin » Thu Jun 30, 2016 9:20 pm

Update:

I confirm that using the option "onlylocal" indeed solves your task: there will be no other way to connect to the application except for SSH tunneling to its host.
Anton Katilin
 
Posts: 5575
Joined: Wed Aug 11, 2004 8:37 am

Re: Restrict connections to SSH

Postby Nomburs » Sat Jul 02, 2016 3:51 am

Thank you very much "onlylocal" does the job perfectly!
Nomburs
 
Posts: 2
Joined: Thu Jun 30, 2016 8:02 pm


Return to Java Profiler

Who is online

Users browsing this forum: Bing [Bot] and 6 guests