ggrandes/bouncer

Bouncer is a network TCP port redirector/forward proxy (like rinetd) with extra features like Reverse tunneling (like ssh -R), SSL tunneling (like stunnel), connection Failover, LoadBalancing and Clustering. In pure Java (BIO)

bouncer's Issues

Auto-Reload on X.509 cert/key change

Add Elliptic Curve Diffie-Hellman Ephemeral to cipher suites

Add ciphers to setupSSLParams:

• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

Too many open files

2013-07-03T11:13:13 [ERROR] [task166:th104:id00000094:MuxInListenRight[x.x.x.x:PPPPP|xxx.x.x.x:JJJJ]] MuxServerListenRemote java.net.SocketException: Too many open files
java.net.SocketException: Too many open files
        at java.net.PlainSocketImpl.socketAccept(Native Method) 

Allow specify config file name

Permit alternative name to default bouncer.conf

KeyGenerator broken in Java 1.8

Exception in thread "main" java.security.cert.CertificateException: Subject class type invalid.
	at sun.security.x509.X509CertInfo.setSubject(X509CertInfo.java:888)
	at sun.security.x509.X509CertInfo.set(X509CertInfo.java:415)
	at org.javastack.bouncer.KeyGenerator.generateCertificate(KeyGenerator.java:117)
	at org.javastack.bouncer.KeyGenerator.main(KeyGenerator.java:91)

do Zip Packaging (Maven Assembly)

Configurable cipher-suites for SSL/TLS

Extend Bouncer to use already opened sockets

Is there a way to extend your library so that when using MUXes, I give it an already opened socket to use for forwarding the data rather than giving it a port to listen to for connections.

Bug in RoundRobin (Forward Connection)

java.lang.ArrayIndexOutOfBoundsException: 321836
at SimpleBouncer$OutboundAddress.connect(SimpleBouncer.java:591)
at SimpleBouncer$PlainServer$PlainConnector.run(SimpleBouncer.java:941)
at SimpleBouncer$1.run(SimpleBouncer.java:210)

Java 11 ClassNotFoundException on start

Hello,

I am using Debian 10.7 and Java 11. At first I received the following:

Unrecognized VM option 'PrintGCDateStamps'
Error: Could not create the Java Virtual Machine.
Error: A fatal exception has occurred. Program will exit.

So I added -XX:+IgnoreUnrecognizedVMOptions to the argument list.

Now I'm getting:

openjdk version "11.0.9.1" 2020-11-04
OpenJDK Runtime Environment (build 11.0.9.1+1-post-Debian-1deb10u2)
OpenJDK 64-Bit Server VM (build 11.0.9.1+1-post-Debian-1deb10u2, mixed mode, sharing)
Error: Could not find or load main class org.javastack.bouncer.Bouncer
Caused by: java.lang.ClassNotFoundException: org.javastack.bouncer.Bouncer

Any help would be appreciated!
Thanks

Replicated Sticky Sessions over multiple Bouncers (HA)

Related to [issue #11]

Support for End SSL (ssl server)

TUN=ENDSSL,SSL=server.crt:server.key[:client.crt]

Add TLSv1.2 cipher suites

Add ciphers to setupSSLParams:

• TLS_RSA_WITH_AES_256_CBC_SHA256
• TLS_RSA_WITH_AES_128_CBC_SHA256

Support client auth in TUN=SSL

`TUN=SSL,SSL=[files]'

wrong last space in HA-Proxy header

Space between 443 and "\r\n"

PROXY TCP4 127.0.0.1 127.0.0.1 56079 443 \r\n

Support Haproxy PROXY protocol v1 (human-readable) for outgoing connections

The PROXY protocol provides a convenient way to safely transport connection information such as a client's address across multiple layers of NAT or TCP proxies.

Overview of format (v1):

"PROXY <TCP4|TCP6> \r\n"
"PROXY TCP4 255.255.255.255 255.255.255.255 65535 65535\r\n"

Full specification: PROXY protocol v1 & v2

Sticky "sessions" in Load Balancing

Implement sticky feature (session affinity) which enables to bind a source IP to a specific backend destination. This ensures that all requests coming from one user will be sent to the same backend application instance.

How do I build and run this?

mvn compile package

Is that right?

but I run it and it says cannot find the class file.

I guess my question is how to get all the jars into the lib directory.

Reverse tunnel example

Hi. Nice tool. While reading the readme I noticed this: Shouldn't it be tun-connect mux1 192.168.1.1 80 TUN_ID=1 and tun-connect mux1 192.168.1.1 22 TUN_ID=2 instead of 192.168.2.1 in the example at https://github.com/ggrandes/bouncer/blob/master/README.md#machine-a-mux-out to be equivalent to ssh -p 5555 192.168.2.1 -R 127.0.0.1:8080:192.168.1.1:80?

Disable SSLv3 [POODLE]

Change setupSSLParams set protos { TLSv1 } and disable { SSLv3 }

Missing ending data on remote close (MUX)