HTTPS/SSH双协议支持-sslh
2014-04-11 20:21:50

本站赞助商链接,请多关照。 sslh是可以让服务器的一个端口同时支持HTTPS和SSH两种协议的链接,例如可以通过HTTPS的443端口来进行SSH通讯,同时又不影响HTTPS本身。采用C开发并在GPL协议下授权。


sslh - Applicative protocol multiplexer

sslh  accepts connections on specified ports, and forwards them further based on tests performed on the first data packet sent by the remote client.

Probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are implemented, and any other protocol that can be tested using a regular expression, can be recognised. A typical use case is to allow serving several services on port 443 (e.g. to connect to ssh from inside a corporate firewall, which almost never block port 443) while still serving HTTPS on that port.

Hence sslh acts as a protocol demultiplexer, or a switchboard. Its name comes from its original function to serve SSH and HTTPS on the same port.


最新版本:1.16
Probes have been made more resilient to incoming data containing NULLs and now behave properly when receiving too-short packets to probe on the first incoming packet.
Libcap support has been added to keep only CAP_NET_ADMIN if started as root with transparent proxying and dropping privileges (enable USELIBCAP in Makefile).
This avoids having to mess with filesystem capabilities.
Bugs related to getpeername which would cause sslh to quit erroneously have been fixed.
IP_FREEDBIND is now set (if available) to bind to addresses which don't yet exist.c

项目主页:http://www.rutschle.net/tech/sslh.shtml