awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
francoismichel avatar

francoismichel/ssh3

0
View on GitHub↗
arxiv.org/abs/2312.08396↗

Ssh3

ssh3 is a secure shell implementation that uses HTTP/3 and the QUIC protocol as its transport layer to reduce handshake latency and improve connection stability. It provides a remote terminal environment where server identities are verified using standard HTTPS X.509 certificates instead of traditional host keys.

The project integrates modern identity verification through OpenID Connect and OAuth 2.0, allowing user authentication via external identity providers. To prevent discovery by public scanners, it includes a server obfuscation feature that requires a secret URL path for client requests.

The system supports secure tunneling for both TCP and UDP traffic, utilizing QUIC streams and datagrams for port forwarding. This includes capabilities for secure proxy jumping through intermediate gateway servers to maintain end-to-end encryption.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • HTTP/3 Secure Shells - Implements a secure shell environment leveraging HTTP/3 to reduce latency and improve stability.
  • HTTP/3 Implementations - Implements the HTTP/3 protocol over QUIC as the primary transport layer for secure shell traffic.
  • Secure Shell Environments - Provides a secure shell environment using HTTP/3 as the underlying transport layer.
  • Network Transport Protocols - Provides a secure and optimized network transport layer for running remote terminal protocols.
  • QUIC-Based Terminals - Utilizes the QUIC protocol to enable faster handshakes and more resilient encrypted terminal sessions.
  • Secure Shell Handshakes - Minimizes network latency during the initial handshake of remote terminal connections.
  • Certificate-Based Authentication - Verifies remote host identities using standard X.509 TLS certificates and public key infrastructure.
  • Server Identity Verification - Implements server identity verification using standard HTTPS X.509 certificates instead of traditional SSH host keys.
  • SSH Certificate Authentication - Authenticates remote servers using standard HTTPS certificates instead of traditional SSH host keys.
  • TCP Connection Forwarding - Provides the capability to tunnel TCP traffic from a local port to a remote destination through a secure shell connection.
  • Encrypted Datagram Transmitters - Wraps UDP packets in encrypted QUIC datagrams to facilitate secure transport of unreliable traffic.
  • SSH Proxy Jump Routings - Routes encrypted connections through intermediate jump hosts using UDP forwarding for end-to-end privacy.
  • TCP and UDP Forwarders - Forwards both TCP and UDP traffic to remote destinations through an encrypted shell connection.
  • UDP Tunneling - Enables secure transport of unreliable UDP traffic by wrapping packets in QUIC datagrams for port forwarding.
  • QUIC Tunnels - Encapsulates TCP traffic within QUIC streams to provide secure port forwarding and remote access.
  • OAuth and Identity Providers - Delegates user authentication to external identity providers using standard protocols like OAuth 2.0 and OIDC.
  • Secure Remote Access - Establishes encrypted tunnels to private networks while obfuscating the server from public scanners.
  • Server Obfuscation Techniques - Prevents server detection by public scanners by requiring a secret URL path for client requests.
  • SSH Authentication - Provides multiple authorization methods for SSH sessions, including OIDC, OAuth 2.0, and public keys.
  • OIDC - Integrates OpenID Connect and OAuth 2.0 to verify user identities during secure shell sessions.
  • Token-Based Identity Verifications - Verifies user identities using cryptographically signed tokens through OpenID Connect and OAuth 2.0 flows.
4,984 stars·118 forks·Go·Apache-2.0·18 views

Star history

Star history chart for francoismichel/ssh3Star history chart for francoismichel/ssh3

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Projects sharing features with Ssh3

These projects share indexed features with Ssh3. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • gliderlabs/sshgliderlabs avatar

    gliderlabs/ssh

    4,145View on GitHub↗

    This project is a Go library and framework for implementing the SSH protocol. It provides a toolkit for building custom SSH servers, managing encrypted connections, and handling remote command execution. The implementation focuses on flexible session management through callback-based handling and a pluggable authentication system that supports passwords, public keys, and certificates. It includes mechanisms for secure network tunneling, including local and reverse port forwarding for TCP and Unix domain socket traffic. The library covers a broad range of protocol capabilities, including cryp

    Gogolanggolang-packagessh
    View on GitHub↗4,145
  • ginuerzh/gostginuerzh avatar

    ginuerzh/gost

    18,019View on GitHub↗

    gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted connections. It functions as a traffic obfuscation gateway and a transparent proxy server capable of intercepting TCP and UDP traffic at the IP level. The project also includes a virtual network interface manager for creating TUN and TAP devices to intercept operating system packets. The system distinguishes itself through a chain-based request routing model, allowing traffic to pass through an ordered sequence of proxy nodes. It provides extensive transport-layer encapsulatio

    Godnsgogolang
    View on GitHub↗18,019
  • alibaba/tenginealibaba avatar

    alibaba/tengine

    13,276View on GitHub↗

    Tengine is an enhanced Nginx web server distribution designed for high-traffic environments. It functions as a high-performance reverse proxy, dynamic load balancer, and HTTP/3 proxy server, integrating an embedded Lua scripting engine to allow for custom business logic and dynamic request processing. The project distinguishes itself through a focus on modern transport protocols and efficiency, featuring native support for QUIC and HTTP/3 to reduce connection latency. It implements userspace UDP forwarding to bypass the kernel for higher throughput and provides the ability to dynamically upda

    Chttp3ingressnginx
    View on GitHub↗13,276
  • tigervnc/tigervncTigerVNC avatar

    TigerVNC/tigervnc

    6,884View on GitHub↗

    TigerVNC is a remote desktop software system consisting of a server and client implementation. It enables the streaming of graphical desktop environments across different operating systems by implementing the RFB protocol to exchange pixel data and input events. The software provides secure remote access through password authentication and the use of cryptographic certificates to verify remote server identities. It facilitates remote system management by capturing a local display on a server and forwarding it to a viewer application for remote control. The system includes capabilities for di

    C++
    View on GitHub↗6,884
Compare all 30 related projects→

Frequently asked questions

What does francoismichel/ssh3 do?

ssh3 is a secure shell implementation that uses HTTP/3 and the QUIC protocol as its transport layer to reduce handshake latency and improve connection stability. It provides a remote terminal environment where server identities are verified using standard HTTPS X.509 certificates instead of traditional host keys.

What are the main features of francoismichel/ssh3?

The main features of francoismichel/ssh3 are: HTTP/3 Secure Shells, HTTP/3 Implementations, Secure Shell Environments, Network Transport Protocols, QUIC-Based Terminals, Secure Shell Handshakes, Certificate-Based Authentication, Server Identity Verification.

Which projects share features with francoismichel/ssh3?

Projects with overlapping indexed features include: gliderlabs/ssh — This project is a Go library and framework for implementing the SSH protocol. It provides a toolkit for building… ginuerzh/gost — gost is a multi-protocol proxy tunnel and secure tunneling server designed to route network traffic through encrypted… tigervnc/tigervnc — TigerVNC is a remote desktop software system consisting of a server and client implementation. It enables the… alibaba/tengine — Tengine is an enhanced Nginx web server distribution designed for high-traffic environments. It functions as a… dunglas/mercure — Mercure is an HTTP-based message broker and real-time pub/sub server that routes asynchronous data updates to… 3proxy/3proxy — 3proxy is a multi-protocol proxy server and network access control gateway. It functions as a network traffic…