Skip to content

doc: add warning about unencrypted dumps #78

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
od-cea merged 1 commit into from
Oct 8, 2026
Merged

doc: add warning about unencrypted dumps #78

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions doc/sshproxy-dumpd.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,10 @@ named after the user. The filename is the concatenation of the start time and
a unique session identifier calculated with some of the header information
(it is the same one used by *sshproxy*(8) in its log).

Warning: sshproxy-dumpd expects an unencrypted data-stream. If you want to
encrypt it, you first need to create an encrypted tunnel (with ssh, vpn…), and
send the data through it.

OPTIONS
-------

Expand Down
3 changes: 3 additions & 0 deletions doc/sshproxy.yaml.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,6 +76,9 @@ It can also be "etcd", in order to store stats into etcd.

It can also be a network address where to send dumps if specified as
'TCP:host:port' (the TCP is case sensitive), e.g. 'TCP:collector:5555'.
Warning: sshproxy dumps are sent unencrypted. If you want to encrypt them, you
first need to create an encrypted tunnel (with ssh, vpn…), and send the dumps
through it.

*dump_limit_size*::
an integer specifying the maximum amount of bytes of a dump. Setting
Expand Down
Loading