{ radak.org }         just another (tech) blog

Multicast over SSH tunnel with TAP bridge

If you found this post you know what you want, so I won't describe it from the begining!

My network plan was:

On linux server:
1. add 'PermitTunnel yes' to /etc/ssh/sshd_config and restart sshd
2. create tap device for user
tunctl -u your_username -t tap0
3. bring up tap0 interface with no IP
ifconfig tap0 0.0.0.0 up
4. bring up eth1 interface with no IP
ifconfig eth1 0.0.0.0 up
3. create bridge interface
brctl addbr br0
4. turn off spanning-tree on bridge interface
brctl stp br0 off
5. add eth1 and tap0 to bridge
brctl addif br0 eth1
brctl addif br0 tap0
6. bring up br0 with IP 10.0.0.1/24 (you will access this IP from client via tunnel)
ifconfig br0 10.0.0.1/24 up
7. add multicast network to bridge interface (my multicast address range begin from 233.1.1.1)
route add -net 233.1.1.0/24 dev br0

On Mac OS X client:
1. install Tunnelblick or tuntap to load tun/tap driver for OSX
2. run ssh with tunnel mode (-o Tunnel=ethernet -> use tap instead of tun; -w 0:0 -> local_tap_dev:remote_tap_dev)
sudo ssh -o Tunnel=ethernet -w 0:0 your_username@linux_server_hostname
3. add ip for tap0 device
sudo ifconfig tap0 10.0.0.2/24 up
5. add multicast network to tunnel interface (on linux you should use: route add -net 233.1.1.0/24 dev tap0)
sudo route add -net 233.1.1.0/24 -interface tap0
4. check connection
ping 10.0.0.1
6. run VLC and enjoy streams