SSH Proxy - Question

[mholt]

SSH Proxy - Question

[mholt]

So if I understand correctly, you want to serve both HTTP(S) and SSH on the same port (either 80 or 443)?

If so, you don't need any special client. Just use the ssh matcher to proxy SSH connections to your SSH server, and everything else to your HTTP server. (Similar examples are in our README.)

Will close now as I think that should answer your question...

[francislavoie]

However if I could cloak it in https traffic it would work.

It would still be raw TCP traffic. This plugin wouldn't "cloak" anything as HTTPS. All this does is raw TCP/UDP connections and traffic, then allows you to handle it depending on the shape of the data.

[mholt]

This module can be used to "cloak" connections but clients have to be configured to work with it. For example, TLS-in-TLS. You could in theory do SSH-in-TLS too, but you'd need a wacky SSH client that can establish a TLS handshake and then send SSH over it. 🤷‍♂️ Or similarly, you could probably figure out a way to get SSH to work after an HTTP request but then your client has to support that very odd behavior.

[gt2416]

Thanks, I’ll test and see if it works. If your curious this is the setup I want to replicate
https://nurdletech.com/linux-notes/ssh/via-http.html

It’s just I use caddy as my front reverse proxy and am happy with it. Don’t want to switch to Apache. Anyway I think this may work or at the very least allow me to have ssh.myserver dns which listens on 443 rather than port 22 which might allow me to bypass the firewall.