gliderlabs/ssh
Ssh
This project is a Go library and framework for implementing the SSH protocol. It provides a toolkit for building custom SSH servers, managing encrypted connections, and handling remote command execution.
The implementation focuses on flexible session management through callback-based handling and a pluggable authentication system that supports passwords, public keys, and certificates. It includes mechanisms for secure network tunneling, including local and reverse port forwarding for TCP and Unix domain socket traffic.
The library covers a broad range of protocol capabilities, including cryptographic algorithm configuration, SSH agent forwarding, and server identity management via PEM files. It also handles session lifecycle management, request multiplexing, and the deserialization of public and private keys.
Features
- SSH Protocol Implementations - Provides a complete pure-Go implementation of the SSH protocol stack for building custom servers.
- General Purpose Frameworks - Provides a comprehensive framework for developing specialized SSH servers in Go for various secure remote access applications.
- Remote Command Execution - Enables the execution of programs or shells on remote hosts with full input and output capture.
- Connection Multiplexing - Implements connection multiplexing to handle multiple independent data streams and requests over a single encrypted transport.
- SSH Frameworks - Ships a comprehensive set of tools for managing SSH handshakes, public key authentication, and cryptographic configurations.
- SSH Session Management - Manages the full lifecycle of SSH sessions, including request authorization and PTY allocation.
- Handshake Key Negotiations - Handles the negotiation of compatible encryption and key exchange methods during the initial connection handshake.
- SSH and Telnet Server Implementations - Provides a complete server-side implementation of the SSHv2 protocol for hosting secure remote access services.
- SSH Authentication - Implements multiple methods for authorizing SSH sessions, including passwords, public keys, and certificates.
- User Authentication Systems - Implements systems for validating user identities using passwords or public keys to control server access.
- Authentication Provider Architectures - Provides a pluggable authentication architecture for swapping password or public key providers via a common interface.
- TCP Connection Forwarding - Implements TCP connection forwarding by piping data between local and remote sockets through an encrypted tunnel.
- Out-of-Band Request Handling - Processes global and channel-specific requests independently of the main data stream to manage session state.
- TCP Tunneling - Implements a mechanism for routing network traffic through encrypted tunnels using local and reverse port forwarding.
- Traffic Routing - Proxies network traffic using local and reverse port forwarding mechanisms to direct traffic to specific services.
- SSH Tunneling Forwarders - Implements tunnels for routing TCP or Unix domain socket traffic through encrypted SSH connections to remote hosts.
- Cryptographic Algorithm Interfaces - Allows restricting the set of key exchanges and ciphers used during the handshake for security compliance.
- Private Key Parsing - Includes utilities for parsing and deserializing cryptographic keys and certificates from PEM formatted files.
- SSH Agent Forwarding - Provides a mechanism to forward authentication agent connections through a session using temporary sockets.
- SSH Certificate Management - Provides signing and verification of SSH certificates including revocation checks for users and hosts.
- SSH Key Parsers - Includes utilities for decoding and parsing SSH public and private keys from PEM and host files.
- Session Handler Callbacks - Provides a callback-based system to route incoming SSH connections to custom handler functions for session logic.
- Host Identity Configuration - Enables setting the server host identity by loading digital signatures from PEM files.
- Networking Libraries - High-level API for creating SSH servers.
- Networking - API for building SSH servers.
- Netzwerk-Bibliotheken - High-level API for creating SSH servers.
