Node.js SSH Tunneling to MongoDB using Mongoose

Question

I have two Mongo DBs. One for my dev environment, one for production as seen here from my Robomongo setup:

The production db is SSH tunneled to my Digital Ocean virtual server as seen here (specifics have been changed obviously). This setup works fine when connecting to/from my production website:

I am now working on a different/related project and need to connect my local machine to my production DB, so I assumed I'd need to use something like tunnel-ssh to get it done. I've followed this answer as an example, but I'm either getting Error: (SSH) Channel open failure: open failed OR it's connecting to my Dev db (when I use 27017 as my dstHost/dstPort/localPort). I must be thinking about this wrong or I'm being dumb with my configuration. I am admittedly a total Mongo/Mongoose novice, so both are equally possible. Any advice?

var fs = require("fs");
var mongoose = require('mongoose');
var tunnel = require('tunnel-ssh');

//===== db connection =====

var config = {
    username:'my.username',
    host:'my.ip.address',
    agent : process.env.SSH_AUTH_SOCK,
    privateKey:require('fs').readFileSync('/Users/myusername/.ssh/id_rsa'),
    port:22,
    dstHost:'mongodb://localhost:27000/mydbname',
    dstPort:27000,
    localHost:'127.0.0.1',
    password:'mypassword',
    localPort: 27000
};

var server = tunnel(config, function (error, server) {
    if(error){
        console.log("SSH connection error: " + error);
    }
    mongoose.connect('mongodb://localhost:27000/mydbname');

    var db = mongoose.connection;
    db.on('error', console.error.bind(console, 'DB connection error:'));
    db.once('open', function() {
        // we're connected!
        console.log("DB connection successful");
        // console.log(server);
    });
});

Thanks in advance!

Thanks! very useful! The only thing that I had to change is, in my case, the config must have "passphrase" instead of "password". — Emigus
– Emigus, Commented Aug 10, 2019 at 1:09

halfer · Accepted Answer · 2023-06-19 10:49:46Z

24

The final working config for future reference. Thanks to mscdex -- I simply needed to provide the correct dstPort and include it in my Mongo URI string (the 27017). So simple.

var config = {
    username:'myusername',
    host:'my.ip.address',
    agent : process.env.SSH_AUTH_SOCK,
    privateKey:require('fs').readFileSync('/Users/myusername/.ssh/id_rsa'),
    port:22,
    dstPort:27017,
    password:'mypassword'
};

var server = tunnel(config, function (error, server) {
    if(error){
        console.log("SSH connection error: " + error);
    }
    mongoose.connect('mongodb://localhost:27017/mydbname');

    var db = mongoose.connection;
    db.on('error', console.error.bind(console, 'DB connection error:'));
    db.once('open', function() {
        // we're connected!
        console.log("DB connection successful");
    });
});

edited Jun 19, 2023 at 10:49

halfer

20.2k20 gold badges110 silver badges207 bronze badges

answered Dec 1, 2016 at 13:19

jeremytripp

1,0381 gold badge11 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Yoga Over a year ago

Hi I have tried your solution it is pretty much helpful but i had to add passphrase to make it work. Thank you very much :)

MartianMartian Over a year ago

what is agent please?

tiomno · Accepted Answer · 2020-12-18 06:13:30Z

10

Or if you don't want to change your code, provided that you have your ssh public key on the tunnel server, you can create a tunnel via ssh on the terminal:

ssh -fNL <local_port>:<mongodb_server_hostname_or_ip>:<mongodb_server_port> <tunnel_server_user>@<tunnel_server_hostname_or_ip>

Example with made-up IPs connecting to a fake AWS EC2 AMI Linux

ssh -fNL 27000:101.202.10.20:27000 [email protected]

Now this mongoose.connect('mongodb://localhost:27000/mydbname'); works like a charm. ;)

answered Dec 18, 2020 at 6:13

tiomno

2,25730 silver badges33 bronze badges

6 Comments

Titou Over a year ago

Best answer IMO !

Hai Alison Over a year ago

May I ask you how to connect through ssh tunnel with the user name password of MongoDB? @Titou

Titou Over a year ago

@HaiAlison You do not use mongoDB username/pwd to connect through ssh. You pass the username/pwd as parameters of the mongodb connexion query through an established tunnel.

Hai Alison Over a year ago

thank you @Titou, I've been fixing my problem with config mongo.conf file added IP address server to bindIp, and it worked.

Raghu Chahar Over a year ago

I am trying this solution with mongo atlas srv string but it is showing srv string do not need port and if I am trying it without srv it is showing no address associated with hostname, can you help please. stackoverflow.com/questions/75434045/…

|

mscdex · Accepted Answer · 2016-12-01 07:42:35Z

7

dstHost needs to be a hostname/IP, not a MongoDB connection string. In this particular case, you can actually omit dstHost, localHost, and localPort in this particular case because they already default to the values you're providing.

answered Dec 1, 2016 at 7:42

mscdex

107k15 gold badges201 silver badges159 bronze badges

3 Comments

jeremytripp Over a year ago

Well, progress at least. Commenting out those three, now I get Error: (SSH) Channel open failure: Connection refused. Mean anything to you? Off I go to the Google machine...

mscdex Over a year ago

You're not using the same port as you show in your screenshot. So try changing it accordingly to match that instead. You'll also need to change the port in your connection string as well.

jeremytripp Over a year ago

That's the ticket. Painfully obvious and fixed in 5 seconds after reading your comment this morning. Thanks so much!

Collectives™ on Stack Overflow

Node.js SSH Tunneling to MongoDB using Mongoose

3 Answers 3

2 Comments

6 Comments

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

6 Comments

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related