"How to hijack, proxy and smuggle sockets with Rack/Ruby"
summary
Shows a concrete Rack-based proxy that uses socket hijacking and HTTP Upgrade to carry raw TCP (VNC/SSH) over an HTTP connection, implemented in Ruby with a custom epoll one-shot C extension and a select fallback. Demonstrates a working demo tunneling VNC and SSH into containers, describes a 10k connections target (reported workable on Linux), explains CPU-saving “bounce select” and why GVL/fibers limit pure Ruby concurrency, and notes need for a browser plugin + native client.
AI-written summary · about
chapters (13)
- 0:00Introduction and setup
- 4:29Proxy architecture explained
- 13:05Non-blocking I/O challenges
- 15:57Bouncing select solution
- 17:46Epoll for high performance
- 20:00WebSocket basics
- 22:36Socket hijacking technique
- 23:40HTTP smuggling concept
- 25:31Full architecture overview
- 28:41Live demo setup
- 30:11VNC connection demo
- 31:23SSH connection demo
- 32:04Q&A session
related talks
37m"How to Hijack, Proxy and Smuggle Sockets with Rack/Ruby"
01h 03mConnect remotely like a pro! Hack VPNs, avoid firewalls, connect even when your machine is down
33mOutside the (Web) Box: Using Ruby for Other Protocols
01h 03mConnecting Remotely Like a Pro
43mFirewall Evasion and Remote Access with OpenSSH
28mReal-Time Rails
34mUnraveling the Cable: How ActionCable works
01h 14mhttp://exploration