Differentiate between STunnel & OCServ

yrutschle / sslh

Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port)

https://www.rutschle.net/tech/sslh/README.html

GNU General Public License v2.0

4.55k stars 368 forks source link

Differentiate between STunnel & OCServ #219

Open smcgrath12 opened 5 years ago

smcgrath12 commented 5 years ago

Is there any way to differentiate between STunnel & OCserv for probes? In my existing setup, the TLS probe goes to OCServ. I want another probe go to an instance of STunnel. Is it possible?

yrutschle commented 5 years ago

Hmmm I thought I answered this but it seems e-mail gets lost...

OCserv appears to be TLS, and so it stunnel, so you cannot use different probes, but on the other hand you can use the SNI setup by setting them on different subdomains. It might be worth having a look if OCserv fills an ALPN field as well. sslh will print both SNI and ALPN fields of incoming connections if you set a high-enough value of verbose.

trochdewei commented 5 years ago