switcher
Infrastructure
protocol multiplexer
SHOW HN2015
165points
65comments
#118of 2,565 in 2015
Top 5%of 2015 by points
How HN took it
CuriousMostly questions and neutral comments
4 positive, 13 neutral or asking, 3 mixed, 6 critical, out of 26 comments about the project. Thread score -0.10.
Idea: 4 for, 3 againstPerformance: 0 for, 2 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for getting SSH through restrictive firewalls
From 2 comments
MIT's SSH server pool (athena.dialup.mit.edu) listens on port 443 for both web-based login using a JS terminal and for actual SSH, using sslh as the multiplexer. SSH on port 443…
geofft on HNCan this help me to ssh to my servers on DO. I am behind my institute squid proxy which is a HTTP proxy. All the ports are blocked, all connections has to be through proxy. For…
h43k3r on HN
Objections
Existing tools like sslh already do this
From 2 comments
``` > apt-cache search ssh http [...] sslh - ssl/ssh multiplexer ``` http://www.rutschle.net/tech/sslh.shtml I mean, it's cool that you got the exercise of implementing this in…
AceJohnny2 on HNIt's a nice idea, but far from the only implementation. sslh is nice as it doesn't need go, and is packaged for most distros: http://www.rutschle.net/tech/sslh.shtml
blueskin_ on HN
Unclear practical advantage over VPN for internal access
From 1 comment
I still don't get the practical advantage of this. As someone said below he/she wrote one and running similar setup in production. Just why? Typicall you access internal stuff…
yeukhon on HN
Requests
Questions
How nmap version detection would report the port
From 1 comment
Anyone knows how nmap -sV (Version detection) would report the open port? HTTP, SSH or neither ?
ponytech on HN
Alternatives named
sslh
From 2 comments
``` > apt-cache search ssh http [...] sslh - ssl/ssh multiplexer ``` http://www.rutschle.net/tech/sslh.shtml I mean, it's cool that you got the exercise of implementing this in…
AceJohnny2 on HNsslh [1] (which is packaged and included in may linux and BSD distributions) has grown to support HTTP, SSL, SSH, OpenVPN, tinc, XMPP from the same port. It claims it can be…
fluidcruft on HN
haproxy
From 1 comment
You can also do this with haproxy. I ran it for a while (I think it was for git). Here is a page about how to do it: https://dgl.cx/2010/01/haproxy-ssh-and-ssl-on-same-port ```…
slyall on HN
sslmux
From 1 comment
Nice! I wrote my own version of this in Go about 7 months ago. It's running in production and has been very reliable. You can find it here on my github account:…
jsd1982 on HN
sshttp
From 1 comment
It doesn't appear to set tcp nodelay, as with most of these forwarders. https://github.com/stealth/sshttp does it at the kernel level, much better.
mkj on HN