Tags: yrutschle/sslh
Tags
v2.3.0:
Added `max_connections` setting to `listen` and
`protocol` configuration; see the
[guide](doc/max_connections.md) for more
information.
accept() is now disabled for some time when ulimit -n is reached.
Support proxyprotocol on incoming connections. See
the [guide](doc/proxyprotocol.md) for information.
Fix proxyprotocol target field (Thanks to Github user 404-Not-Found)
Fix memory leak in regex probe.
v2.2.4: Fix CVE-2025-46806 for "Misaligned Memory Accesses in `is_openvpn_protocol()`" Fix CVE-2025-46807 for "File Descriptor Exhaustion in sslh-select and sslh-ev" Fix potential parsing of undefined data in syslog probe (no CVE assigned) Thanks to Matthias Gerstner of the SUSE security team for the security review that found these defects!
v2.2.0: Added a boolean setting "is_unix" for listen and protocol entries. This will use the 'host' setting as a path name to a socket file, and connections (listening or connecting) will be performed on Unix socket instead of Internet sockets. Support HAProxy's proxyprotocol on the backend server side. Lots of documentation about a new, simpler way to perform transparent proxying. New "verbose" option that overrides all other verbose settings.
PreviousNext