awesome-repositories.com
Blog
awesome-repositories.com

Entdecke die besten Open-Source-Repositories mit KI-gestützter Suche.

EntdeckenKuratierte SuchenOpen-Source-AlternativenSelf-hosted SoftwareBlogSitemap
ProjektÜber unsRanking-MethodikPresseMCP-Server
RechtlichesDatenschutzAGB
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
antoniomika avatar

antoniomika/sish

0
View on GitHub↗
4,655 Stars·330 Forks·Go·MIT·3 Aufrufessi.sh↗

Sish

Sish ist ein Reverse-SSH-Proxy und Tunneling-Server, der entwickelt wurde, um lokale Dienste für das Internet freizugeben. Er fungiert als SSH-Tunneling-Proxy, der HTTP-, WebSocket- und TCP-Traffic von einem Remote-Server an eine lokale Maschine weiterleitet und so die Erstellung öffentlicher URLs für lokale Anwendungen ermöglicht.

Das Projekt zeichnet sich durch eine Kombination aus einem SNI-Proxy für das Routing verschlüsselten TLS-Traffics ohne Entschlüsselung und einem TCP-Load-Balancer aus, der eingehende Anfragen auf mehrere Backend-Ziele verteilt. Es enthält zudem eine dedizierte Service-Konsole für die Echtzeit-Inspektion und das Debugging weitergeleiteter Anfragen.

Das System bietet umfassende Zugriffskontrolle und Sicherheitsmanagement, einschließlich Public-Key- und Passwort-Authentifizierung, IP-Adressfilterung und privatem TCP-Aliasing, um die öffentliche Exposition spezifischer Dienste zu verhindern. Zusätzliche Funktionen umfassen Virtual-Host-Routing, Domain-Name-Mapping und die automatisierte Bereitstellung von Wildcard-SSL-Zertifikaten über DNS-Anbieter.

Die Konfiguration und Verwaltung öffentlicher und privater Tunnel erfolgt über ein Command-Line-Interface.

Features

  • Remote Port Forwarding - Uses the SSH protocol to tunnel network traffic from a remote server port back to a local listener.
  • SSH Tunneling - Establish secure, encrypted network tunnels using the SSH protocol to route remote internet traffic to local services.
  • Local Tunneling Services - Exposes local development environments and web applications to the public internet for remote access and testing.
  • SNI-Based TLS Routers - Directs TLS connections to different backend services based on the server name provided during the initial handshake.
  • Load Balancers - Distributes incoming network connections across multiple backend aliases to increase availability and performance.
  • HTTP Tunnels - Creates secure tunnels that encapsulate local web application traffic within HTTP requests for public internet exposure.
  • SNI Proxies - Directs encrypted TLS traffic to specific backends by inspecting the Server Name Indication without decryption.
  • Public Service Exposure - Maps internal local services to public domains with automated certificate management to enable global internet access.
  • Reverse Proxy Tunneling Tools - Creates public URLs and tunnels to forward remote internet traffic to services running on a local machine.
  • SSH Tunneling Proxies - Exposes local services to the internet by routing HTTP, WebSocket, and TCP traffic over secure SSH connections.
  • SNI Routing - Routes encrypted TLS traffic to specific backends by inspecting the Server Name Indication without decrypting the payload.
  • SSH Tunneling Forwarders - Routes TCP and web traffic from a remote server back to a local machine via secure SSH connections.
  • Encrypted Backend Routing - Directs encrypted connections to different backends based on Server Name Indication without decrypting data.
  • Tunnel Management CLIs - Provides a command line interface to configure and manage public or private tunnels for various traffic types.
  • Secure Access Controls - Provides security mechanisms to control whether tunneled services are open to the public or restricted to authenticated users.
  • Virtual Host Routing - Implements virtual host routing to direct web requests and socket connections to multiple local sites through a secure tunnel.
  • Authenticated TCP Aliasing - Provides private TCP pointers that require authentication to prevent direct public exposure of local services.
  • Custom Domain Mapping - Maps custom domains and subdomains to local tunnel endpoints using DNS records for human-readable URLs.
  • IP Address Filters - Restricts connectivity to tunneled services by filtering source IP addresses against a predefined allowlist.
  • Authenticated TCP Aliases - Defines internal TCP addresses that remain unreachable from the public internet and require authentication for access.
  • TCP Tunneling - Forwards raw TCP data from remote ports to local services, enabling internet access for non-HTTP protocols.
  • Traffic Distribution - Balances incoming web and TCP requests across multiple backend aliases to optimize performance and availability.
  • Wildcard Certificate Issuance - Automates the issuance and renewal of wildcard SSL certificates using DNS challenges.
  • Password Authentication - Restricts server access by requiring a pre-configured password during the user authentication process.
  • Private Network Tunnels - Establishes secure, authenticated connections between clients using port forwards to restrict service access.
  • Public Key Authentication - Verifies user identity using a directory of public keys for secure tunnel access.
  • Dynamic Key Reloading - Verifies client identities using a public key directory that reloads automatically when file changes are detected.
  • Secure SSH Access - Provides a security layer that restricts tunnel access using public key validation, password authentication, and source IP allowlists.
  • SSH Authentication - Secures tunnel access using passwords or keys with the ability to reload credentials without restarting.
  • SSL Certificate Automation - Automates the issuance and renewal of wildcard SSL certificates via DNS providers to secure tunneled traffic.
  • Tunnel Access Controllers - Controls tunnel connectivity using public key validation, password authentication, and IP address allowlists.
  • IP Access Restrictions - Restricts tunnel connectivity by filtering source IP addresses against a predefined allowlist.
  • Tunneling and Proxying - SSH-based server for tunneling HTTP and WebSocket traffic.

Star-Verlauf

Star-Verlauf für antoniomika/sishStar-Verlauf für antoniomika/sish

KI-Suche

Entdecke weitere awesome Repositories

Beschreibe in einfachen Worten, was du brauchst — die KI bewertet tausende kuratierte Open-Source-Projekte nach Relevanz.

Start searching with AI

Häufig gestellte Fragen

Was macht antoniomika/sish?

Sish ist ein Reverse-SSH-Proxy und Tunneling-Server, der entwickelt wurde, um lokale Dienste für das Internet freizugeben. Er fungiert als SSH-Tunneling-Proxy, der HTTP-, WebSocket- und TCP-Traffic von einem Remote-Server an eine lokale Maschine weiterleitet und so die Erstellung öffentlicher URLs für lokale Anwendungen ermöglicht.

Was sind die Hauptfunktionen von antoniomika/sish?

Die Hauptfunktionen von antoniomika/sish sind: Remote Port Forwarding, SSH Tunneling, Local Tunneling Services, SNI-Based TLS Routers, Load Balancers, HTTP Tunnels, SNI Proxies, Public Service Exposure.

Welche Open-Source-Alternativen gibt es zu antoniomika/sish?

Open-Source-Alternativen zu antoniomika/sish sind unter anderem: fosrl/pangolin — Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private… sshnet/ssh.net — SSH.NET is a .NET library that implements the SSH-2 protocol for encrypted remote connections and secure file… alibaba/higress — Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It… beyondcode/expose — Expose is a PHP-based tunneling service and local environment proxy that exposes local servers to the internet via… uku/unblock-youku — Unblock-Youku is a geo-blocking circumvention tool and proxy server designed to grant access to region-locked video… microsoft/vscode-remote-release — This project provides a remote development extension pack and infrastructure for bootstrapping isolated toolchains and…

Open-Source-Alternativen zu Sish

Ähnliche Open-Source-Projekte, sortiert nach der Anzahl der gemeinsamen Funktionen mit Sish.
  • fosrl/pangolinAvatar von fosrl

    fosrl/pangolin

    21,255Auf GitHub ansehen↗

    Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

    TypeScriptcrowdsecdockerhome-lab
    Auf GitHub ansehen↗21,255
  • sshnet/ssh.netAvatar von sshnet

    sshnet/SSH.NET

    4,310Auf GitHub ansehen↗

    SSH.NET is a .NET library that implements the SSH-2 protocol for encrypted remote connections and secure file transfers. It provides a complete SSH-2 protocol stack implementation with a channel multiplexing engine that manages multiple concurrent channels over a single connection, supporting simultaneous shell sessions, remote command execution, SFTP transfers, and port forwarding tunnels. The library includes a pluggable authentication pipeline supporting password, public key, certificate, keyboard-interactive, and multi-factor authentication combinations. The library distinguishes itself t

    C#networkscpsftp
    Auf GitHub ansehen↗4,310
  • alibaba/higressAvatar von alibaba

    alibaba/higress

    7,558Auf GitHub ansehen↗

    Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

    Goai-gatewayai-nativeapi-gateway
    Auf GitHub ansehen↗7,558
  • beyondcode/exposeAvatar von beyondcode

    beyondcode/expose

    4,569Auf GitHub ansehen↗

    Expose is a PHP-based tunneling service and local environment proxy that exposes local servers to the internet via public URLs. It provides a secure way to share development previews and test APIs without deploying to a remote server. The project is distinguished by its support for self-hosted tunneling infrastructure, allowing users to deploy a private server for full control over data and network configuration. It includes a dedicated HTTP webhook debugger for capturing, inspecting, and replaying incoming requests to verify system behavior in a local environment. The toolset covers network

    PHP
    Auf GitHub ansehen↗4,569
  • Alle 30 Alternativen zu Sish anzeigen→