gliderlabs/ssh

Features

• SSH Protocol Implementations - Provides a complete pure-Go implementation of the SSH protocol stack for building custom servers.
• General Purpose Frameworks - Provides a comprehensive framework for developing specialized SSH servers in Go for various secure remote access applications.
• Remote Command Execution - Enables the execution of programs or shells on remote hosts with full input and output capture.
• Connection Multiplexing - Implements connection multiplexing to handle multiple independent data streams and requests over a single encrypted transport.
• SSH Frameworks - Ships a comprehensive set of tools for managing SSH handshakes, public key authentication, and cryptographic configurations.
• SSH Session Management - Manages the full lifecycle of SSH sessions, including request authorization and PTY allocation.
• Handshake Key Negotiations - Handles the negotiation of compatible encryption and key exchange methods during the initial connection handshake.
• SSH and Telnet Server Implementations - Provides a complete server-side implementation of the SSHv2 protocol for hosting secure remote access services.
• SSH Authentication - Implements multiple methods for authorizing SSH sessions, including passwords, public keys, and certificates.
• User Authentication Systems - Implements systems for validating user identities using passwords or public keys to control server access.
• Authentication Provider Architectures - Provides a pluggable authentication architecture for swapping password or public key providers via a common interface.
• TCP Connection Forwarding - Implements TCP connection forwarding by piping data between local and remote sockets through an encrypted tunnel.
• Out-of-Band Request Handling - Processes global and channel-specific requests independently of the main data stream to manage session state.
• TCP Tunneling - Implements a mechanism for routing network traffic through encrypted tunnels using local and reverse port forwarding.
• Traffic Routing - Proxies network traffic using local and reverse port forwarding mechanisms to direct traffic to specific services.
• SSH Tunneling Forwarders - Implements tunnels for routing TCP or Unix domain socket traffic through encrypted SSH connections to remote hosts.
• Cryptographic Algorithm Interfaces - Allows restricting the set of key exchanges and ciphers used during the handshake for security compliance.
• Private Key Parsing - Includes utilities for parsing and deserializing cryptographic keys and certificates from PEM formatted files.
• SSH Agent Forwarding - Provides a mechanism to forward authentication agent connections through a session using temporary sockets.
• SSH Certificate Management - Provides signing and verification of SSH certificates including revocation checks for users and hosts.
• SSH Key Parsers - Includes utilities for decoding and parsing SSH public and private keys from PEM and host files.
• Session Handler Callbacks - Provides a callback-based system to route incoming SSH connections to custom handler functions for session logic.
• Host Identity Configuration - Enables setting the server host identity by loading digital signatures from PEM files.
• Networking Libraries - High-level API for creating SSH servers.
• Networking - API for building SSH servers.
• Networking Libraries - High-level API for creating SSH servers.

Star history