awesome-repositories.com
Blog
MCP
awesome-repositories.com

Découvrez les meilleurs dépôts open-source grâce à notre recherche par IA.

ExplorerRecherches sélectionnéesAlternatives open sourceLogiciels auto-hébergésBlogPlan du site
ProjetÀ proposNotre méthodologiePresseServeur MCP
Mentions légalesConfidentialitéConditions d'utilisation
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
·
antoniomika avatar

antoniomika/sish

0
View on GitHub↗
4,655 stars·330 forks·Go·MIT·4 vuesssi.sh↗

Sish

Sish est un proxy SSH inverse et un serveur de tunnelisation conçu pour exposer des services locaux à Internet. Il fonctionne comme un proxy de tunnelisation SSH qui achemine le trafic HTTP, WebSocket et TCP depuis un serveur distant vers une machine locale, permettant la création d'URL publiques pour des applications locales.

Le projet se distingue par une combinaison d'un proxy SNI pour acheminer le trafic TLS chiffré sans déchiffrement et d'un équilibreur de charge TCP qui distribue les requêtes entrantes entre plusieurs cibles backend. Il inclut également une console de service dédiée pour l'inspection et le débogage en temps réel des requêtes transférées.

Le système fournit un contrôle d'accès et une gestion de la sécurité complets, incluant l'authentification par clé publique et mot de passe, le filtrage d'adresses IP et l'aliasing TCP privé pour empêcher l'exposition publique de services spécifiques. Les capacités supplémentaires incluent le routage d'hôtes virtuels, le mappage de noms de domaine et le provisionnement automatisé de certificats SSL wildcard via des fournisseurs DNS.

La configuration et la gestion des tunnels publics et privés sont effectuées via une interface en ligne de commande.

Features

  • Remote Port Forwarding - Uses the SSH protocol to tunnel network traffic from a remote server port back to a local listener.
  • SSH Tunneling - Establish secure, encrypted network tunnels using the SSH protocol to route remote internet traffic to local services.
  • Local Tunneling Services - Exposes local development environments and web applications to the public internet for remote access and testing.
  • SNI-Based TLS Routers - Directs TLS connections to different backend services based on the server name provided during the initial handshake.
  • Load Balancers - Distributes incoming network connections across multiple backend aliases to increase availability and performance.
  • HTTP Tunnels - Creates secure tunnels that encapsulate local web application traffic within HTTP requests for public internet exposure.
  • SNI Proxies - Directs encrypted TLS traffic to specific backends by inspecting the Server Name Indication without decryption.
  • Public Service Exposure - Maps internal local services to public domains with automated certificate management to enable global internet access.
  • Reverse Proxy Tunneling Tools - Creates public URLs and tunnels to forward remote internet traffic to services running on a local machine.
  • SSH Tunneling Proxies - Exposes local services to the internet by routing HTTP, WebSocket, and TCP traffic over secure SSH connections.
  • SNI Routing - Routes encrypted TLS traffic to specific backends by inspecting the Server Name Indication without decrypting the payload.
  • SSH Tunneling Forwarders - Routes TCP and web traffic from a remote server back to a local machine via secure SSH connections.
  • Encrypted Backend Routing - Directs encrypted connections to different backends based on Server Name Indication without decrypting data.
  • Tunnel Management CLIs - Provides a command line interface to configure and manage public or private tunnels for various traffic types.
  • Secure Access Controls - Provides security mechanisms to control whether tunneled services are open to the public or restricted to authenticated users.
  • Virtual Host Routing - Implements virtual host routing to direct web requests and socket connections to multiple local sites through a secure tunnel.
  • Authenticated TCP Aliasing - Provides private TCP pointers that require authentication to prevent direct public exposure of local services.
  • Custom Domain Mapping - Maps custom domains and subdomains to local tunnel endpoints using DNS records for human-readable URLs.
  • IP Address Filters - Restricts connectivity to tunneled services by filtering source IP addresses against a predefined allowlist.
  • Authenticated TCP Aliases - Defines internal TCP addresses that remain unreachable from the public internet and require authentication for access.
  • TCP Tunneling - Forwards raw TCP data from remote ports to local services, enabling internet access for non-HTTP protocols.
  • Traffic Distribution - Balances incoming web and TCP requests across multiple backend aliases to optimize performance and availability.
  • Wildcard Certificate Issuance - Automates the issuance and renewal of wildcard SSL certificates using DNS challenges.
  • Password Authentication - Restricts server access by requiring a pre-configured password during the user authentication process.
  • Private Network Tunnels - Establishes secure, authenticated connections between clients using port forwards to restrict service access.
  • Public Key Authentication - Verifies user identity using a directory of public keys for secure tunnel access.
  • Dynamic Key Reloading - Verifies client identities using a public key directory that reloads automatically when file changes are detected.
  • Secure SSH Access - Provides a security layer that restricts tunnel access using public key validation, password authentication, and source IP allowlists.
  • SSH Authentication - Secures tunnel access using passwords or keys with the ability to reload credentials without restarting.
  • SSL Certificate Automation - Automates the issuance and renewal of wildcard SSL certificates via DNS providers to secure tunneled traffic.
  • Tunnel Access Controllers - Controls tunnel connectivity using public key validation, password authentication, and IP address allowlists.
  • IP Access Restrictions - Restricts tunnel connectivity by filtering source IP addresses against a predefined allowlist.
  • Tunneling and Proxying - SSH-based server for tunneling HTTP and WebSocket traffic.

Historique des stars

Graphique de l'historique des stars pour antoniomika/sishGraphique de l'historique des stars pour antoniomika/sish

Recherche par IA

Explorez plus de dépôts awesome

Décrivez vos besoins en langage naturel — l'IA classe des milliers de projets open source sélectionnés par pertinence.

Start searching with AI

Alternatives open source à Sish

Projets open source similaires, classés selon le nombre de fonctionnalités partagées avec Sish.
  • fosrl/pangolinAvatar de fosrl

    fosrl/pangolin

    21,255Voir sur GitHub↗

    Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private network resources. It functions as a cloud-native network controller that orchestrates encrypted tunnels, traffic routing, and access policies across distributed environments. By leveraging WireGuard for secure data transport, the platform enables authenticated access to internal web applications, terminal sessions, and remote desktops without exposing services to the public internet. The platform distinguishes itself through a declarative infrastructure model that synchronizes n

    TypeScriptcrowdsecdockerhome-lab
    Voir sur GitHub↗21,255
  • sshnet/ssh.netAvatar de sshnet

    sshnet/SSH.NET

    4,310Voir sur GitHub↗

    SSH.NET is a .NET library that implements the SSH-2 protocol for encrypted remote connections and secure file transfers. It provides a complete SSH-2 protocol stack implementation with a channel multiplexing engine that manages multiple concurrent channels over a single connection, supporting simultaneous shell sessions, remote command execution, SFTP transfers, and port forwarding tunnels. The library includes a pluggable authentication pipeline supporting password, public key, certificate, keyboard-interactive, and multi-factor authentication combinations. The library distinguishes itself t

    C#networkscpsftp
    Voir sur GitHub↗4,310
  • alibaba/higressAvatar de alibaba

    alibaba/higress

    7,558Voir sur GitHub↗

    Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It provides a centralized system for routing, securing, and optimizing traffic directed toward large language models, AI agents, and microservice architectures. The project distinguishes itself through deep AI orchestration, including the ability to host and manage Model Context Protocol servers that transform REST APIs into tools for AI agents. It features specialized AI infrastructure for model request proxying, protocol translation across multiple providers, and semantic-based c

    Goai-gatewayai-nativeapi-gateway
    Voir sur GitHub↗7,558
  • beyondcode/exposeAvatar de beyondcode

    beyondcode/expose

    4,569Voir sur GitHub↗

    Expose is a PHP-based tunneling service and local environment proxy that exposes local servers to the internet via public URLs. It provides a secure way to share development previews and test APIs without deploying to a remote server. The project is distinguished by its support for self-hosted tunneling infrastructure, allowing users to deploy a private server for full control over data and network configuration. It includes a dedicated HTTP webhook debugger for capturing, inspecting, and replaying incoming requests to verify system behavior in a local environment. The toolset covers network

    PHP
    Voir sur GitHub↗4,569
Voir les 30 alternatives à Sish→

Questions fréquentes

Que fait antoniomika/sish ?

Sish est un proxy SSH inverse et un serveur de tunnelisation conçu pour exposer des services locaux à Internet. Il fonctionne comme un proxy de tunnelisation SSH qui achemine le trafic HTTP, WebSocket et TCP depuis un serveur distant vers une machine locale, permettant la création d'URL publiques pour des applications locales.

Quelles sont les fonctionnalités principales de antoniomika/sish ?

Les fonctionnalités principales de antoniomika/sish sont : Remote Port Forwarding, SSH Tunneling, Local Tunneling Services, SNI-Based TLS Routers, Load Balancers, HTTP Tunnels, SNI Proxies, Public Service Exposure.

Quelles sont les alternatives open-source à antoniomika/sish ?

Les alternatives open-source à antoniomika/sish incluent : fosrl/pangolin — Pangolin is a zero-trust remote access platform designed to provide secure, identity-aware connectivity to private… sshnet/ssh.net — SSH.NET is a .NET library that implements the SSH-2 protocol for encrypted remote connections and secure file… alibaba/higress — Higress is an AI API gateway and cloud-native traffic manager that functions as a Kubernetes ingress controller. It… beyondcode/expose — Expose is a PHP-based tunneling service and local environment proxy that exposes local servers to the internet via… uku/unblock-youku — Unblock-Youku is a geo-blocking circumvention tool and proxy server designed to grant access to region-locked video… microsoft/vscode-remote-release — This project provides a remote development extension pack and infrastructure for bootstrapping isolated toolchains and…