Web-based SSH reverse tunnel manager?

I need to build a single “remote support” server that users can establish connections to from their systems, and for my support people to be able to ssh into a port on that box and connect to the remote system. The obvious solution here is to use SSH reverse tunnels, and for the Support people to ssh into that port.

This works great for a single system with significant user interaction at the remote site, but doesn’t scale to a larger number of remote sites requiring simultaneous access (different port numbers required on the internal “remote support server”, different ports needing to be specified on the remote side).

I imagine that someone must have built a Web-based front end to get user data (e.g., name of remote site) and assign a port that the reverse tunnel can connect on, and then to provide that information to the users of that remote support server.

It seems to me that such a Web-based reverse SSH tunnel manager solution, to accept and track these connections, should already exist. But if it does, I can’t find it.

I’ll build it from scratch if I have to, but frankly I’d rather leverage something already out there, especially if it’s free or open.

Anybody know of any such thing?

Metrics as Monkey’s Paw

It’s been noted that quality programming is hard to measure, and it’s no surprise that companies measuring programmers based on the volume of code turned out have larger products but not necessarily better ones. I’m far from the first person to note that you get what you measure, but despite that people continue to use lousy metrics.

Perhaps the notion that form without content is void should be considered a special case of you get what you measure: if you demand well-structured, well-argued essays without measuring their content, you’ll end up with essays lionizing Nazis as intellectual heroes; if you demand a certain number of abstracts per week according to formula, you’ll get that number of abstracts but they will have no value for their intended audience.

In both cases, one must ask whether the goal can be measured appropriately, and if you’ll be satisfied when you get exactly what you ask for.