quicssh

quicssh

😄 quicssh is a QUIC proxy that allows to use QUIC to connect to an SSH server without needing to patch the client or the server.

Architecture

flowchart TB
subgraph i["Internet"]
    direction TB
    subgraph h1["client host A (ordinary connection)"]
        n11["ssh bob@example\.com"]
    end
    subgraph h2["client host B (proxying)"]
        n21["ssh -o ProxyCommand 'quicssh client --addr %h:4545' alice@example\.com"]
        n22["quicssh client --addr example.com:4545"]
    end
    subgraph h3["remote server exmaple\.com"]
        n31["quicssh server --addr :4545"]
        n32["sshd"]
    end
end
n11 ====>|ordinary TCP connection| n32
n21 -->|stdio pipe| n22
n22 ==>|"QUIC (UDP)"| n31
n31 -->|TCP| n32

Usage

Modes

$ quicssh -h
NAME:
   quicssh - Client and server parts to proxy SSH (TCP) over UDP using QUIC transport

USAGE:
   quicssh [global options] command [command options]

VERSION:
   v0.0.0-20230730133128-1c771b69d1a7+dirty

COMMANDS:
   server
   client
   help, h  Shows a list of commands or help for one command

GLOBAL OPTIONS:
   --help, -h     show help
   --version, -v  print the version

Client mode

$ quicssh client -h
NAME:
   quicssh client

USAGE:
   quicssh client [command options]

OPTIONS:
   --addr value       address of server (default: "localhost:4242")
   --localaddr value  source address of UDP packets (default: ":0")
   --help, -h         show help

Server mode

$ quicssh server -h
NAME:
   quicssh server

USAGE:
   quicssh server [command options]

OPTIONS:
   --bind value         bind address (default: "localhost:4242")
   --sshdaddr value     target address of sshd (default: "localhost:22")
   --idletimeout value  exit on idle interval (10s, 2m, 1h) (default: "0s")
   --help, -h           show help

Install

Original

$ go get -u moul.io/quicssh

Install this fork

go install github.com/mzbgf/quicssh@latest

Resources

• https://korben.info/booster-ssh-quic-quicssh.html

License

© 2019-2023 Manfred Touron - Apache-2.0 License