google / huproxy Goto Github PK

Hello,

it would be nice if I could give both server and client a static passphrase, with which the websocket traffic then is encrypted.

I know, you can use websockets with TLS and also the SSH traffic is encrypted already, but still, if a company intercepts TLS traffic and inspects it, you would see that SSH traffic is encapsulated.

Configuration
Tried the nginx setup described in README.md as well as an Apache config documented in keymaster

Steps to reproduce

1. connect to multiple servers (3+) via ssh
2. reboot one of the three
3. At least 1 other connection will disconnect. Usually both.

Expectation
Rebooted server connection would drop, other two remain connected

Workaround
Currently I have a specific interface used for ssh hosts. Using iptables to drop FIN packets stops other connections from being dropped.

Same rule for both v4 and v6 iptables.
-A INPUT -i INTERFACE -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN -j DROP - This workaround causes issues with various connections since actual disconnections aren't respected. I would love to get rid of this rule.

Why there's no release available?

gorilla/websocket#417

HUProxy has issues with go http2 being transparently upgraded. Enabling http2 on Apache / Nginx in conjunction with HUProxy causes issues.

I can't find the htpasswd's file.