ssh3 icon indicating copy to clipboard operation
ssh3 copied to clipboard

Inquiry About Dynamic Port Forwarding for Full-Featured SOCKS5 Proxy in ssh3

Open wiresock opened this issue 2 years ago • 2 comments

Hello ssh3 Team,

I hope this message finds you well. I am reaching out to inquire about the current or planned support for dynamic port forwarding in ssh3, similar to the SSH -D command line switch found in traditional SSH clients.

I've noticed that ssh3 supports UDP port forwarding, which is fantastic. Given this capability, it seems that ssh3 could potentially offer a full-featured SOCKS5 proxy with UDP support through dynamic port forwarding. This feature would be extremely beneficial for users who require enhanced security and privacy, as it allows for setting up a SOCKS proxy that can tunnel through the SSH connection.

Could you please provide some information on whether this feature is on the roadmap? If it is not currently in development, would you consider adding it in future releases?

Your insights on this matter would be greatly appreciated. It would help in our decision-making processes regarding the adoption of tools in our workflows.

Thank you for your dedication to developing ssh3. I look forward to hearing from you.

Best regards,

Vadim

wiresock avatar Dec 18 '23 20:12 wiresock

Hello,

Actually, SOCKS forwarding was a feature I wanted to implement for the article instead of implementing TCP and UDP port forwarding separately.

In the end I ended up implementing the latter because there was only a client support for SOCKS in the [golang.org/x/net/internal/socks](https://pkg.go.dev/golang.org/x/net/internal/socks- package.

That is a feature that we want to add in the near future. Note that the size of UDP datagrams in quic-go is currently limited to 1200 bytes (cf https://github.com/quic-go/quic-go/issues/3599) and we might want to have that fixed before shipping full SOCKS support.

francoismichel avatar Dec 19 '23 11:12 francoismichel