From e2fddf17fce28361a1191bb4b25e3b5e461eb679 Mon Sep 17 00:00:00 2001 From: yrutschle Date: Thu, 29 Nov 2018 18:31:55 +0100 Subject: [PATCH] updated description to better match our maturity --- README.md | 26 +++++++++++++++++--------- 1 file changed, 17 insertions(+), 9 deletions(-) diff --git a/README.md b/README.md index 8b6ee4e..19953c9 100644 --- a/README.md +++ b/README.md @@ -5,17 +5,25 @@ sslh -- A ssl/ssh multiplexer them further based on tests performed on the first data packet sent by the remote client. -Probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are -implemented, and any other protocol that can be tested using -a regular expression, can be recognised. A typical use case -is to allow serving several services on port 443 (e.g. to -connect to SSH from inside a corporate firewall, which -almost never block port 443) while still serving HTTPS on -that port. +Probes for HTTP, TLS/SSL (including SNI and ALPN), SSH, +OpenVPN, tinc, XMPP are implemented, and any other protocol +that can be tested using a regular expression, can be +recognised. A typical use case is to allow serving several +services on port 443 (e.g. to connect to SSH from inside a +corporate firewall, which almost never block port 443) while +still serving HTTPS on that port. Hence `sslh` acts as a protocol demultiplexer, or a -switchboard. Its name comes from its original function to -serve SSH and HTTPS on the same port. +switchboard. With the SNI and ALPN probe, it makes a good +front-end to a virtual host farm hosted behind a single IP +address. + +`sslh` has the bells and whistles expected from a mature +daemon: privilege and capabilities dropping, inetd support, +systemd support, transparent proxying, +chroot, logging, IPv4 and IPv6, a fork-based and a +select-based model, and more. + Compile and install ===================