Skip to content

Add Unix socket forwarding - #8

Merged
blaubaer merged 1 commit into
mainfrom
migrate/from-origin/pr196
Sep 2, 2026
Merged

Add Unix socket forwarding#8
blaubaer merged 1 commit into
mainfrom
migrate/from-origin/pr196

Conversation

@blaubaer

@blaubaer blaubaer commented Sep 2, 2026

Copy link
Copy Markdown
Member

Reimplements gliderlabs/ssh#196 by @deansheather for the current fork architecture.

Summary

  • add explicit callbacks and handlers for OpenSSH direct and reverse Unix socket forwarding
  • integrate reverse Unix forwards with connection workers, channel limits, and the shared reverse-forward limit
  • handle the x/crypto/ssh listener-registration race and prevent stale channel opens from crossing path reuse
  • add a standalone streamlocal example plus protocol, lifecycle, limit, race, and real Unix-socket tests

Security

  • keep Unix forwarding disabled unless callbacks and handlers are explicitly configured
  • leave path authorization, listener creation, permissions, stale files, and unlink behavior to application policy
  • avoid exposing callback/backend errors to SSH clients

Testing

  • go test -count=1 ./...
  • go test -shuffle=on -count=10 ./...
  • go test -race -count=1 ./...
  • targeted streamlocal tests with 100 normal and 20 race repetitions
  • go vet and golangci-lint
  • Linux 386, Windows amd64/386, and Darwin amd64/arm64 cross-builds
  • all standalone example modules

@blaubaer blaubaer self-assigned this Sep 2, 2026
@blaubaer blaubaer added the enhancement New feature or request label Sep 2, 2026
@blaubaer
blaubaer merged commit 9b1d484 into main Sep 2, 2026
17 checks passed
@blaubaer
blaubaer deleted the migrate/from-origin/pr196 branch September 2, 2026 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant