Skip to content

Commit

Permalink
Initial code checkin.
Browse files Browse the repository at this point in the history
  • Loading branch information
clefru committed Aug 14, 2014
1 parent 800718d commit b0bc10e
Show file tree
Hide file tree
Showing 3 changed files with 439 additions and 0 deletions.
17 changes: 17 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,3 +2,20 @@ nassh-relay
===========

Relay for Native Client SSH, see http://goo.gl/HMsm8p

Typical use case is when you want to firewall your sshd port. Also the
relay supports roaming clients better than a direct TCP connection, as
the TCP stack cuts the connection if the client IP changes. This relay
on the other hand supports reconnecing from all HTTP client as long as
the client can present it with the correct session ID[*].

Invoke:
$ node nassh-relay.js <port> [external-redirect]

At relay selection, the server echos back the HTTP Host header as the
relay. If that host is not directly reachable by its clients, you need
to specify an external-redirect.

[*] The session is still protected by SSH, so guessing the session ID
is a denial of service attack and allows sniffing the encrypted sshd
response bytestream.
Loading

0 comments on commit b0bc10e

Please sign in to comment.