Teleconsole

Teleconsole is a free service to share your terminal session with people you trust. Your friends can join via a command line using SSH or by using their browser. Use it when two parties are separated by NAT and you cannot connect via SSH directly.

Installing

Download the latest binaries for your platform here or you can build it from source.

Quick installation for the impatient:

curl https://www.teleconsole.com/get.sh | sh

Quick Start

Simply type ./teleconsole in your terminal and this is what you will see:

> teleconsole
Starting local SSH server on localhost...
Requesting a disposable SSH proxy for ekontsevoy...
Checking status of the SSH tunnel...

Your Teleconsole ID: 29382923a870075324233c490831a7
WebUI for this session: https://teleconsole.com/s/29382923a870075324233c490831a7
To stop broadcasting, exit current shell by typing 'exit' or closing the window.

Teleconsole will launch a new shell session and print the unique session ID of 29382923a870075324233c490831a7 which you need to share with your friend. Your friend can join in either by clicking on a link, or by typing:

> teleconsole join 29382923a870075324233c490831a7

Now you are both using the same terminal session running on your machine, even if both of you are on separate networks separated by NAT.

You can watch a quick video of how this works. Here's the simplified animation:

WARNING

Please understand that by running teleconsole you are virtually giving the keyboard to anyone with a link. We made the session IDs sufficiently hard to guess, but you are still running an SSH server accessible via public Internet during the Teleconsole session.

Ending the Session

When you're done with the session, make sure to close it (stop teleconsole process) either by typing exit in the terminal or simply closing it. When Teleconsole exits, the outbound SSH tunnel is closed and your machine is no longer accessible.

Port Forwarding

Let's say you are developing a web application and it is currently running on your localhost:5000. You can make it accessible by your friends if you forward port 5000 to them:

> teleconsole -f localhost:5000

When your friends join this session, they will see something like this:

ATTENTION: ekontsevoy has invited you to access port 5000 on their machine via localhost:9000

So now your friend can click on http://localhost:9000 to access your application.

Bear in mind, Teleconsole is just an SSH server, this means your friend can request port forwarding without your help, just like a regular SSH client would:

> teleconsole -f 9000:localhost:5000 join <session-id>

How does it work?

Teleconsole is built on top of Gravitational Teleport which is a clustered SSH server with built-in SSH bastion/proxy. Both projects are open source and hosted here on Github.

What happens when you type teleconsole?

It generates unique single-use SSH credentials and launches an SSH server on localhost. Then Teleconsole logs into itself, an equivalent of ssh localhost.
SSH credentials are POSTed via HTTPS to a free anonymous SSH proxy on https://teleconsole.com.
The server creates a single-use disposable instance of Teleport SSH proxy, which is trusted by the teleconsole SSH server running on your machine.
Your local teleconsole SSH server creates an outbound SSH tunnel to the disposable Teleport proxy running on https://teleconsole.com. The proxy now acts as a bridge connecting the outside world to your machine.

And here is what happens when you type teleconsole join session-id:

teleconsole requests the anonymous proxy for SSH key to session-id via HTTPS.
It uses those keys to SSH into the proxy.
The proxy forwards the connection through the tunnel created in step 3 to your machine.

CLI Reference

Typing teleconsole help gets you:

Usage: teleconsole <flags> <command>

Teleconsole allows you to start a new shell session and invite your 
friends into it.

Simply close the session to stop sharing.

Flags:
   -f host:port  Invite joining parties to connect to host:port
   -L spec       Request port forwarding when joining an existing session
   -insecure     When set, the client will trust invalid SSL certifates
   -v            Verbose logging
   -vv           Extra verbose logging (debug mode)
   -s host:port  Teleconsole server address [teleconsole.com]

Commands:
    help               Print this help
    join [session-id]  Join active session

Examples:
  > teleconsole -f 5000  

    Starts a shared SSH session, also letting joining parties access TCP 
    port 5000 on your machine.

  > teleconsole -f gravitational.com:80

    Starts a shared SSH session, forwarding TCP port 80 to joining parties.
    They will be able to visit http://gravitational.com using your machine
    as a proxy.

  > teleconsole -L 5000:gravitational.com:80 join <session-id>

    Joins the existing session requesting to forward gravitational.com:80
    to local port 5000.

Made by Gravitational Inc http://gravitational.com

Support for Private SSH Bastions

Some people may be uncomfortable using publicly accessible SSH bastion on https://teleconsole.com They can do the same thing by setting up a Teleport bastion on their own server.

In fact, Teleport supports many more features, including session recording and replay, scp and is compatible with OpenSSH client.

Roadmap

Before open sourcing it, we have been using Teleconsole with close friends quite a bit. So far the top feature requests are:

Read-only sessions: this would allow you to broadcast only the picture of your terminal. Port forwarding in this mode would be disabled.
Ability to see who's viewing your session.
Additional password auth per session.

What do you think we should add next? Let us know: info@gravitational.com

Who Built Teleconsole?

Teleconsole is an easy to use demo of Gravitational Teleport, a product created by Gravitational Inc. Teleport is an open source component of our commercial offering for deploying and remotely operating SaaS applications on top of 3rd party enterprise infrastructure.

For more info, drop us an email: info@gravitational.com

leihentulong/teleconsole