SSHD

名称: sshd

状态： GA

SSHD拨号器使用SSH协议建立数据通道。

SSH拨号器支持简单用户名/密码认证和公钥认证。

用户名/密码认证

命令行配置文件

gost -L :8080 -F sshd://gost:gost@:8443

services:
- name: service-0
  addr: ":8080"
  handler:
    type: auto
    chain: chain-0
  listener:
    type: tcp
chains:
- name: chain-0
  hops:
  - name: hop-0
    nodes:
    - name: node-0
      addr: :8443
      connector:
        type: sshd
      dialer:
        type: sshd
        auth:
          username: gost 
          password: gost

认证信息

认证信息作用于拨号器，如果需要对连接器设置认证可以通过配置文件指定

services:
- name: service-0
  addr: ":8080"
  handler:
    type: auto
    chain: chain-0
  listener:
    type: tcp
chains:
- name: chain-0
  hops:
  - name: hop-0
    nodes:
    - name: node-0
      addr: :8443
      connector:
        type: sshd
        auth:
          username: gost 
          password: gost
      dialer:
        type: sshd

公钥认证

The SSHD dialer supports multiple public key authentication methods: specifying a private key file via privateKeyFile, using SSH Agent via the SSH_AUTH_SOCK environment variable, or reading the passphrase from the system keyring.

When the SSH_AUTH_SOCK environment variable is set, GOST automatically connects to the local SSH Agent for public key authentication, eliminating the need to specify private key file paths in configuration.

命令行配置文件

gost -L sshd://gost@:2222?authorizedKeys=/path/to/authorized_keys

services:
- name: service-0
  addr: ":2222"
  handler:
    type: sshd
    auth:
      username: gost
  listener:
    type: sshd
    metadata:
      authorizedKeys: /path/to/authorized_keys

参数列表

backlog (int, default=128)

单个连接的数据流队大小

privateKeyFile (string)

Private key file path. Supports ~ prefix for home directory expansion (e.g., ~/.ssh/id_rsa)

passphrase (string)

证书密码

passphraseFromKeyring (bool, default=false)

Read the passphrase from the system keyring instead of specifying it in config. When enabled, the passphrase parameter is ignored, and GOST retrieves the secret via SSH <privateKeyFile> from the system keyring

authorizedKeys (string)

客户端公钥列表文件

限制

SSHD监听器只能与SSHD处理器一起使用，构建基于SSH协议的标准端口转发服务。