francoismichel/ssh3
Ssh3
ssh3 هو تنفيذ لبروتوكول Secure Shell يستخدم HTTP/3 وبروتوكول QUIC كطبقة نقل لتقليل تأخير المصافحة وتحسين استقرار الاتصال. يوفر بيئة طرفية عن بُعد حيث يتم التحقق من هويات الخادم باستخدام شهادات HTTPS X.509 القياسية بدلاً من مفاتيح المضيف التقليدية.
يدمج المشروع التحقق الحديث من الهوية من خلال OpenID Connect وOAuth 2.0، مما يسمح بمصادقة المستخدم عبر موفري الهوية الخارجيين. ولمنع الاكتشاف بواسطة الماسحات الضوئية العامة، فإنه يتضمن ميزة إخفاء الخادم التي تتطلب مسار URL سرياً لطلبات العميل.
يدعم النظام الأنفاق الآمنة لحركة مرور TCP وUDP، باستخدام تدفقات ومخططات QUIC لإعادة توجيه المنفذ. يتضمن ذلك إمكانيات للقفز عبر الوكيل الآمن من خلال خوادم بوابة وسيطة للحفاظ على التشفير من طرف إلى طرف.
Features
- HTTP/3 Secure Shells - Implements a secure shell environment leveraging HTTP/3 to reduce latency and improve stability.
- HTTP/3 Implementations - Implements the HTTP/3 protocol over QUIC as the primary transport layer for secure shell traffic.
- Secure Shell Environments - Provides a secure shell environment using HTTP/3 as the underlying transport layer.
- Network Transport Protocols - Provides a secure and optimized network transport layer for running remote terminal protocols.
- QUIC-Based Terminals - Utilizes the QUIC protocol to enable faster handshakes and more resilient encrypted terminal sessions.
- Secure Shell Handshakes - Minimizes network latency during the initial handshake of remote terminal connections.
- Certificate-Based Authentication - Verifies remote host identities using standard X.509 TLS certificates and public key infrastructure.
- Server Identity Verification - Implements server identity verification using standard HTTPS X.509 certificates instead of traditional SSH host keys.
- SSH Certificate Authentication - Authenticates remote servers using standard HTTPS certificates instead of traditional SSH host keys.
- TCP Connection Forwarding - Provides the capability to tunnel TCP traffic from a local port to a remote destination through a secure shell connection.
- Encrypted Datagram Transmitters - Wraps UDP packets in encrypted QUIC datagrams to facilitate secure transport of unreliable traffic.
- SSH Proxy Jump Routings - Routes encrypted connections through intermediate jump hosts using UDP forwarding for end-to-end privacy.
- TCP and UDP Forwarders - Forwards both TCP and UDP traffic to remote destinations through an encrypted shell connection.
- UDP Tunneling - Enables secure transport of unreliable UDP traffic by wrapping packets in QUIC datagrams for port forwarding.
- QUIC Tunnels - Encapsulates TCP traffic within QUIC streams to provide secure port forwarding and remote access.
- OAuth and Identity Providers - Delegates user authentication to external identity providers using standard protocols like OAuth 2.0 and OIDC.
- Secure Remote Access - Establishes encrypted tunnels to private networks while obfuscating the server from public scanners.
- Server Obfuscation Techniques - Prevents server detection by public scanners by requiring a secret URL path for client requests.
- SSH Authentication - Provides multiple authorization methods for SSH sessions, including OIDC, OAuth 2.0, and public keys.
- OIDC - Integrates OpenID Connect and OAuth 2.0 to verify user identities during secure shell sessions.
- Token-Based Identity Verifications - Verifies user identities using cryptographically signed tokens through OpenID Connect and OAuth 2.0 flows.
