3 ms·
The article mentions sslh which works like httpssh. It also possible to achieve this with haproxy like this: frontend https bind *:443 mode tcp
by hackernudes 3y ago
The article mentions sslh which works like httpssh. It also possible to achieve this with haproxy like this:
frontend https
bind *:443
mode tcp
tcp-request inspect-delay 2s
use_backend https_loopback if { req.ssl_ver gt 0 }
default_backend ssh
Another option is to use TLS SNI (Server Name Indication) like a virtualhost-style ssh server (https://www.haproxy.com/blog/route-ssh-connections-with-haproxy https://www.haproxy.com/blog/route-ssh-connections-with-hapr...). You can use the 'openssl' command in your ProxyCommand which is pretty readily available.