47 Commits

Author SHA1 Message Date
Yves Rutschle
4978641271 add reference to new proxyprotocol to README 2025-04-06 11:38:30 +02:00
Yves Rutschle
ef6f698d86 document proxyprotocol 2025-04-03 21:30:34 +02:00
Yves Rutschle
5e252bb3f6 add links to ip-routing transparent proxying 2024-06-12 09:40:33 +02:00
Sergio C
5f1c1b1b61
Update README.md (#431)
Updated tproxy.md location
2024-03-24 08:33:34 +01:00
Yves Rutschle
7ca567fcd9 clarify the difficulty of transparent proxying 2024-03-12 22:07:17 +01:00
Konstantin
91b649daa0
Set image tag to use github in docker-compose example (#414)
Change image tag of the docker-compose example from ```sslh:latest``` to ```ghcr.io/yrutschle/sslh:latest```
2023-11-19 20:43:13 +01:00
Yves Rutschle
1f66e2e093 add sslh-ev 2023-11-15 21:46:42 +01:00
Clement
b11f2620ab
Add clarification on --transparent mode for docker 2023-08-09 22:57:47 +08:00
clement
27f3e9075a update examples 2023-08-08 08:11:08 +08:00
Clement
ecbc33ba29
Update github build link 2023-07-21 07:07:25 +08:00
clement
5635dc5142 Enable --transparent mode for docker 2023-07-21 06:58:18 +08:00
Olliver Schinagl
9dd560493a
container: Drop privileges
A container is best served with the least amount of privileges. This
also ensures we don't have to drop anything later.

This does require running the container with elevated capabilities.

Note, that if for whatever reason, 'root' access within the container is
needed, this can easily be accomplished by running the container with
`docker run --user root:root sslh` for example.

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
2023-06-05 22:50:06 +02:00
Olliver Schinagl
295dba93b5
docker: Do not foreground by default, this should be a choice
It is weird that when invoking sslh, that it daemonizess in foreground by
default. This should always be a user choice, and if not, it should be a
program default.

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
2023-06-05 22:50:06 +02:00
Olliver Schinagl
397f672248
docker: Automatically build and push container
The current sslh container works fine, but needs to be created manually
and locally by the user. Instead, let the pipeline do the dirty work and
push it to this repo's own registry.

Signed-off-by: Olliver Schinagl <oliver@schinagl.nl>
2023-06-05 17:09:50 +02:00
jeffre
6f497b6c8b docs: corrections to docker usage 2022-01-20 20:21:12 -07:00
Yves Rutschle
82b8ba547e
Merge pull request #205 from inztar/master
add Dockerfile
2021-07-31 16:28:42 +02:00
yrutschle
c049885758 document UDP support 2021-07-16 22:37:41 +02:00
yrutschle
0c388cb367 update mailing list address 2020-09-23 21:34:14 +02:00
yrutschle
61191edf7c initialised FAQ 2020-04-10 21:45:04 +02:00
Jason Cooke
49e59734cb
docs: fix typo 2019-07-09 09:12:39 +12:00
yrutschle
fde86a778d remove contents from README that was added in doc/ 2019-06-29 21:51:02 +02:00
yrutschle
8e203c897e added SOCKS5 to README 2019-06-24 21:39:18 +02:00
Taras Inzyk
95a6577cda add Dockerfile 2019-04-06 17:26:08 +05:00
yrutschle
848b107f2b document conf2struct dependency 2019-02-03 21:13:37 +01:00
yrutschle
e2fddf17fc updated description to better match our maturity 2018-11-29 18:31:55 +01:00
Alexey Kopytko
09aaf39e25
Update README.md
Removed redundant dollar signs since they're not used anywhere else in the README.
2018-06-01 15:13:50 +09:00
yrutschle
d9541392f8
Merge pull request #139 from tmolitor-stud-tu/master
Better documentation of transparent proxy support with more features
2018-01-02 23:24:46 +01:00
Alejandro Riera
09d11e3bc8
Doc update about Transparent proxy support
Advise users to save the configuration of `iptables` and `ip` rules and routes or they risk loosing it after a reboot and/or crash.
2017-11-08 11:54:26 +01:00
Thilo Molitor
d243d36add Fix ipv6 config copy-paste errors 2017-10-10 07:36:09 +02:00
Thilo Molitor
74767cb781 Some cleanup 2017-10-10 07:22:44 +02:00
Thilo Molitor
2a76b520d5 Add better documentation of transparent proxy support.
This allows for some more generalized configs.
You don't need to specify ports anymore and still can
connect directly to the running services if you want.

It also allows you to use "localhost" as destination in your sslh config,
something that wasn't possible with the old scheme.
2017-10-10 07:07:28 +02:00
Jim Tittsler
234c088324 Fix README typos. 2016-12-19 10:24:31 +09:00
James Hogarth
e6cb3596d1 Merge error in README.md mixing sections 2016-03-30 11:48:45 +01:00
James Hogarth
b3f48d9876 Add systemd capabilities to sslh, rebased on current master 2016-01-29 16:20:54 +00:00
Yves Rutschle
0b6cc0d909 Added a note on configuring transparent proxying for both IPv4 and IPv6 2016-01-22 11:25:53 +01:00
muxator
48164c4d77 typo: "transparent proying" -> "transparent proxying" 2015-03-15 00:44:39 +01:00
gapato
21552fc176 Fix typo for CentOS install instructions in README 2015-02-04 12:53:32 +01:00
Yves Rutschle
88af6ebaee Updated configuration info and startup scripts to use the configuration file rather than command line parameters 2015-01-01 18:59:05 +01:00
Yves Rutschle
d91cd59bba Documented configuration trick to have both transparent proxying while still retaining the ability to connect to ssh directly 2015-01-01 18:31:10 +01:00
Yves Rutschle
c03168042f Added IPv6 transparent proxying instructions 2014-12-31 14:53:59 +01:00
Ruben van Staveren
0d8e2438de Correct markdown 2014-07-22 21:43:03 +02:00
Ruben van Staveren
36cf99697b Add instruction for FreeBSD 2014-07-22 20:30:52 +02:00
Yves Rutschle
d10b539a5a fixed obsolete README reference to -o option 2014-04-19 13:10:12 +02:00
Yves Rutschle
6fb234f85e added fail2ban configuration examples 2014-03-30 18:51:21 +02:00
Yves Rutschle
2d3b6c4abd fix Markdown documentation for libcap 2014-02-09 20:50:03 +01:00
Yves Rutschle
4dfa694e8a Merged libcap patch 2014-02-09 20:34:26 +01:00
Nicolas Braud-Santoni
b24f9820f9 Markdownify the README 2013-11-05 22:34:48 +01:00