SSH as discard server?
rapier
rapier at psc.edu
Sat Aug 7 01:09:41 AEST 2021
Before I go about reinventing the wheel I thought I would ask here.
I'm doing some development in SSH and it would be helpful if I could
isolate certain aspects of what I am working on. What I would like to do
is have an SSH aware discard server that accepts an inbound connection
from an SSH client and then dumps every incoming packet into a black
hole. I don't want to process, decrypt, or otherwise do anything with
those packets post authentication. Switching to a none cipher won't work
as it would require both ends to renegotiate to none. Likewise, just
redirecting the output to /dev/null means I'm still spending cycles
decrypting and verifying the HMAC.
So does anyone know of any existing implementations that can do this? If
not, does anyone have any suggestions as to where to start? I'm thinking
that adding a new CFLAG so I can do a discard in in cipher_crypt would
be reasonable but I wanted to get any thoughts people might have.
e.g. if ((cc->cipher->flags & CFLAG_DISCARD) != 0) {
return 0;
}
Thanks,
Chris
More information about the openssh-unix-dev
mailing list