Port forwarding in slirp

[CEL]

I thought it would be nice if Basilisk would allow ports to be exposed outside the virtual network without requiring tun/tap or root privileges, so I decided to investigate the source code. I came across a nice little function, slirp_redir, which wasn't being called anywhere but did exactly what I wanted. So I added some code for accepting "redir" as a preference item, and now it works.

If you are using slirp networking you can forward a port by adding to your prefs file a line such as the following:

Code: Select all

redir tcp:8000:10.0.2.15:80

This will forward TCP port 8000 on the host to port 80 in the virtual machine, assuming its address is 10.0.2.15. You can actually leave out the IP if it is 10.0.2.15, because that is the default.

The code is online here:
https://github.com/clehner/macemu

You can find a Linux binary, built on Fedora 17, here:
https://github.com/clehner/macemu/downloads

I'll try to add a binary for OS X soon.

Here is a screenshot.


Present issues:

• When a program in the emulator listens on a port, at least with TCP, there is a delay of 16 seconds to start the listening. When connecting from the host there is sometimes another delay of 16 seconds. When connecting from other hosts there does not seem to be this delay.
• Using 0.0.0.0 as the client address does not work well, so you have to specify the client's address if it is something other than 10.0.2.15 (although in my experience it is always 10.0.2.15).

[Ronald P. Regensburg]

Really nice, but why did you fork it from the original cebix/macemu? The BasiliskII/SheepShaver project is best helped forward by joining efforts.

[CEL]

Forking tends to be the way on github for independent developers to contribute to projects. I don't meant to create a separate project. I'll make a pull request now on the cebix repo so the changes can get merged upstream or be commented on.

[Gemfinder]

Did slirp port forwarding ever get merged into SheepShaver?

My urgent goal is to run Civilization II Gold (OS9) over TCP/IP.

[Cat_7]

Hi,

It seems the code was integrated into at least the kanjitalk755 repository.
However, I couldn't get it to work in my Windows builds. This might be due to my network setup.

To try whether it works at all, first make sure your network prefs are set to slirp.
Then edit your basilisk or sheepshaver prefs manually. Add:

redir tcp:8080:10.0.2.15:80

Don't use the GUI. If you do, the pref will be deleted.
Start Basilisk or SheepShaver directly and start the web sharing service.
In your host try to connect to http://localhost:8080

Best,
Cat_7

[Ronald P. Regensburg]

It seems the code was integrated into at least the kanjitalk755 repository.

This is new to me. I never saw mention of this before. Where did you see this?

[Cat_7]

Hi Ronald,

If you clone the repository linked to above, you can search it for slirp_redir.

I see slirp_redir referenced in:
Basilisk/src/slirp/slirp.c
Basilisk/src/slirp/libslirp.h
and
Basilisk/src/Unix/ether_unix.cpp

If you then search the kanjitakk755 source, you can find these same references to slirp_redir.
I see no reference to slirp_redir in ether_windows.cpp, so that might very well explain why it would not work in Windows

Best,
Cat_7

[Ronald P. Regensburg]

I though it was specifically added in kanjitak755 source, Apparently it was merged to cebix/macemu in 2012, before kanjitalk755 forked it. That is why I missed it.

[Cat_7]

Ah, already merged that long ago!
Did you have a chance to see whether it works in macOS builds?

Best,
Cat_7

[kanjitalk755]

In the latest source, both BII and SS support the port forwarding (all platforms).

[Ronald P. Regensburg]

In the latest source, both BII and SS support the port forwarding (all platforms).

Existed for macOS and Linux and was now added by kanjkitalk755 for Windows.

[Gemfinder]

Thanks for the advice. So far it doesn't work. I suppose this could be either SS/slirp, or the tcp rules on the host machine (although the MacOS firewall is already turned off, and a mysql service is running OK from localhost:3306).

Added port forwarding to the config file as directed, and assumed the line order doesn't matter:



Turned on web sharing, and verified it works within the emulator.



But no access from the host OS:



And port 8080 is closed:

[Cat_7]

It seems to work for Basilisk, but not for SheepShaver.

Best,
Cat_7

[kanjitalk755]

SheepShaver also supports the port forwarding after commit 8ebc4c9.

[Cat_7]

Yes, great,

A new SheepShaver build I just created privately works perfectly.
So when a new SheepShaver build comes available, it will support redirection too.

Thanks,
Cat_7

[Ronald P. Regensburg]

New macOS builds of both SheepShaver and BasiliskII coming up soon.

[Ronald P. Regensburg]

New versions have to wait. After the server upgrade last night, I cannot SFTP anymore to emaculation.com.

[Gemfinder]

Commit 8ebc4c9 works great. Thanks very much for this.

Ronald, I noticed this was your post number 6502. Looking forward to post number 68000

[Ronald P. Regensburg]

Now at post 6507.

I can ftp again, but lost a day to figure out what caused the probem.

The promised new builds will come soon, maybe tomorrow.

[Gemfinder]

JK, a bit of CPU numerology. Thanks again for the port forwarding update

[Halcyon]

Wow, the port forwarding feature is great! I can finally run a Hotline Server in Sheepshaver and expose the ports.

In case it helps anyone else, you can forward multiple ports (as need by Hotline) by adding additional redir lines:

redir tcp:5500:10.0.2.15:5500
redir tcp:5501:10.0.2.15:5501

[ksv]

Thanks so much for adding port forwarding! And kudos to the devs for still adding new features and keeping up with new OSes and CPU archs!

@Gemfinder I had the same goal, and got a working setup now with Civ II over the Internet using a private IKEv2 VPN server in order to avoid having to set up NAT on each client router. Do you know if there's anyone besides us still playing / wanting to play Civ II over the Internet?

[mathieutozer]

I believe I'd like to do the opposite to what is described here and wonder if it is possible.
Is it possible to access my modern macOS hosted localhost from BasiliskII / Sheep Shaver? I am trying to test an server API I am developing.

[CEL]

I believe I'd like to do the opposite to what is described here and wonder if it is possible.
Is it possible to access my modern macOS hosted localhost from BasiliskII / Sheep Shaver? I am trying to test an server API I am developing.

The host might be accessible at 10.0.2.2, I am not sure. Or at its usual LAN address(es).

[mathieutozer]

Thanks for the tip I'll try it out. I was able to unblock myself by setting up ngrok to forward the requests over the internet. I am having a new issue though where my client code is making http 1.0 requests which I think causes ngrok to want to forward back to https (requests made from modern OS use 1.1 and it works). iCab does work though, but I don't think I have the source code.