3 ms·
I keep hoping for a QUIC transport option for SSH with regular TLS. Just to make the life of all these middleboxes way more difficult.
by Avamander 3y ago
I keep hoping for a QUIC transport option for SSH with regular TLS. Just to make the life of all these middleboxes way more difficult.
- rkeene2 3y agoIt's already pretty easy to use SSH over TLS using stunnel or any other thing that can do TLS to TCP proxies (socat, haproxy). On some external system you just setup stunnel/socat/haproxy to listen on port 443 with TLS and proxy to TCP port 22, then just use openssh with openssl s_client as the proxy command.
- kernel_cat 3y agoAlthough not the same as what you desire (which I fully agree with) - I implemented a encrypted TCP program tunneling app which tunnels over HTTP(S) websockets [1]. This should frustrate middleboxes, but would rather it be as native as HTTP(S) itself. [1]: https://github.com/nnathan/monopiped https://github.com/nnathan/monopiped