yrutschle/sslh

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

5109 stars · 398 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

sslh is a protocol multiplexer daemon written in C that accepts connections on a single port and forwards them to different backend services based on probes of the first data packet. It supports detection of HTTP, TLS/SSL (with SNI and ALPN), SSH, OpenVPN, WireGuard, tinc, XMPP, SOCKS5, and regex-matchable protocols.

Use cases

• serve SSH and HTTPS on the same port 443
• connect to SSH through a corporate firewall that only allows port 443
• route multiple services through one port behind a single IP address
• use SNI-based routing to front a virtual host farm
• hide backend servers while preserving client IPs with transparent proxying or proxyprotocol
• share a single port between OpenVPN, WireGuard, and HTTPS

When to choose

• you need to multiplex several protocols on one port to bypass restrictive firewalls
• you host multiple services behind a single IP and want SNI/ALPN-based routing
• you want a mature daemon with systemd support, privilege dropping, chroot, and transparent proxying

When to avoid

• you need a general-purpose reverse proxy or load balancer rather than protocol demultiplexing
• you require high-security production use without reviewing the known CVEs and connection-limit hardening
• your protocols cannot be distinguished by the first data packet or a regex probe

Facets

service · maturity stable

proxy networking routing security networking security self-hosted bsd windows cross-platform cli self-hosted protocol-multiplexer port-sharing ssl ssh tls sni transparent-proxy daemon c devops linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="yrutschle/sslh")