google-labs-jules[bot] 45d1bae2fd Mitigate DoS by limiting concurrent handshakes ...

This commit introduces mechanism to limit the number of concurrent SSH
handshakes to prevent resource exhaustion (goroutines/memory) during a
SYN flood or connection flood attack.

1.  **Global Limit:** A semaphore limits total concurrent handshakes to 20.
    This applies backpressure to the `Accept` loop.
2.  **Per-IP Limit:** Using `github.com/sethvargo/go-limiter`, we now
    limit the rate of connection attempts per IP to 3 per second.
3.  **Timeout:** The initial handshake timeout is reduced from 20s to 10s.

The global semaphore is acquired before the handshake and released
immediately after the handshake completes (or fails), ensuring that
long-lived sessions do not consume a handshake slot.

2025-12-01 20:00:37 +00:00

..

terminal

sshd/terminal/terminal.go: Clamp pos to protect from some fuzzing failures

2021-10-13 10:43:49 -04:00

auth.go

main, sshd: Refactor authentication, add IP throttling, improve passphrase auth

2021-05-31 10:08:30 -04:00

client_test.go

main, sshd: Refactor authentication, add IP throttling, improve passphrase auth

2021-05-31 10:08:30 -04:00

client.go

Add /allowlist command (#399)

2022-01-06 09:09:51 -05:00

doc.go

Default port to 2022, updating documentation to match new default. Addresses nice to have in #76.

2015-01-04 22:00:09 -06:00

logger.go

sshd: Better comments

2019-02-24 09:40:47 -06:00

net_test.go

Add /allowlist command (#399)

2022-01-06 09:09:51 -05:00

net.go

Mitigate DoS by limiting concurrent handshakes

2025-12-01 20:00:37 +00:00

pty.go

Get the term value

2020-04-12 12:37:55 -04:00

ratelimit.go

ratelimiter: Bump up to 16kb/min from 4kb/min

2016-08-06 16:41:19 -04:00

terminal.go

sshd, chat/message: Add more debug logging for close failures

2021-04-05 11:06:44 -04:00