google / huproxy Goto Github PK

Configuration
Tried the nginx setup described in README.md as well as an Apache config documented in keymaster

Steps to reproduce

1. connect to multiple servers (3+) via ssh
2. reboot one of the three
3. At least 1 other connection will disconnect. Usually both.

Expectation
Rebooted server connection would drop, other two remain connected

Workaround
Currently I have a specific interface used for ssh hosts. Using iptables to drop FIN packets stops other connections from being dropped.

Same rule for both v4 and v6 iptables.
-A INPUT -i INTERFACE -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN -j DROP - This workaround causes issues with various connections since actual disconnections aren't respected. I would love to get rid of this rule.

gorilla/websocket#417

HUProxy has issues with go http2 being transparently upgraded. Enabling http2 on Apache / Nginx in conjunction with HUProxy causes issues.

I can't find the htpasswd's file.

Hello,

it would be nice if I could give both server and client a static passphrase, with which the websocket traffic then is encrypted.

I know, you can use websockets with TLS and also the SSH traffic is encrypted already, but still, if a company intercepts TLS traffic and inspects it, you would see that SSH traffic is encapsulated.

Why there's no release available?