mholt/caddy-l4

feature request: reverse proxy ssh via username

Open

#63 opened on Jul 13, 2022

View on GitHub
 (5 comments) (6 reactions) (0 assignees)Go (114 forks)github user discovery
enhancementhelp wanted

Repository metrics

Stars
 (1,738 stars)
PR merge metrics
 (Avg merge 14d 19h) (7 merged PRs in 30d)

Description

It would be cool if the ssh matcher allowed matching against a user, and if the handler allowed you to pass the request on to a different user. ie,

git@example.com   -> caddy-l4 -> git@git.internal
host1@example.com -> caddy-l4 -> user@host1.internal

basically exactly what tg123/sshpiper does. i think itd be cool if caddy-l4 could support reverse proxying ssh in this manner by default.

apologies in advance if this doesnt seem feasible or its outside of the scope of this plugin !

Contributor guide

Research direction
Investigate the SSH protocol to extract the username from the initial handshake and implement a matcher and handler in caddy l4 to route SSH connections based on the username, similar to sshpiper.
Tech stack
go
Domain
networking
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
GoCaddynetworking
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65