updated description to better match our maturity

This commit is contained in:
yrutschle 2018-11-29 18:31:55 +01:00
parent 7af31c45c9
commit e2fddf17fc

View File

@ -5,17 +5,25 @@ sslh -- A ssl/ssh multiplexer
them further based on tests performed on the first data them further based on tests performed on the first data
packet sent by the remote client. packet sent by the remote client.
Probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are Probes for HTTP, TLS/SSL (including SNI and ALPN), SSH,
implemented, and any other protocol that can be tested using OpenVPN, tinc, XMPP are implemented, and any other protocol
a regular expression, can be recognised. A typical use case that can be tested using a regular expression, can be
is to allow serving several services on port 443 (e.g. to recognised. A typical use case is to allow serving several
connect to SSH from inside a corporate firewall, which services on port 443 (e.g. to connect to SSH from inside a
almost never block port 443) while still serving HTTPS on corporate firewall, which almost never block port 443) while
that port. still serving HTTPS on that port.
Hence `sslh` acts as a protocol demultiplexer, or a Hence `sslh` acts as a protocol demultiplexer, or a
switchboard. Its name comes from its original function to switchboard. With the SNI and ALPN probe, it makes a good
serve SSH and HTTPS on the same port. front-end to a virtual host farm hosted behind a single IP
address.
`sslh` has the bells and whistles expected from a mature
daemon: privilege and capabilities dropping, inetd support,
systemd support, transparent proxying,
chroot, logging, IPv4 and IPv6, a fork-based and a
select-based model, and more.
Compile and install Compile and install
=================== ===================