OpenBSD Handbook

Current snapshot · amd64 · Generated 2026-09-09

sslh-2.3.1p1

SSL/SSH multiplexer

Back to search · Project homepage

Description

sslh accepts HTTPS, SSH, OpenVPN, WireGuard, tinc, XMPP and other protocols on the same port, demultiplexing them based on probes of the first packet. This makes it possible to connect to any of these servers on port 443 (e.g. from inside a corporate firewall, which almost never blocks port 443) while still serving HTTPS on that port. TCP and UDP are supported. TLS probing can use SNI and ALPN. Three binaries are provided: sslh-fork, sslh-select and sslh-ev. -fork has higher overhead, but processes are isolated and restarts don't disrupt active connections. -select and -ev avoid multiple processes: of the two, -ev should be lower overhead but is newer; -select is more well-tested.

Package information

Ports path
net/sslh
Package architecture
amd64
Maintainer
The OpenBSD ports mailing-list <ports@openbsd.org>
Categories
security, net
Available flavors
None listed
Only for architectures
aarch64, amd64, arm, i386, mips64, mips64el, powerpc, powerpc64, riscv64, sparc64, alpha, hppa

These are ports metadata. Binary availability depends on the release, architecture and mirror. Build and test dependencies are not an installation checklist.

Direct dependencies

Library

Build

Test

Installing and updating packages · Package details as JSON