@@ -91,7 +91,7 @@ $ chisel server --help
91
91
variable PORT and fallsback to port 8080).
92
92
93
93
--key, An optional string to seed the generation of a ECDSA public
94
- and private key pair. All commications will be secured using this
94
+ and private key pair. All communications will be secured using this
95
95
key pair. Share the subsequent fingerprint with clients to enable detection
96
96
of man-in-the-middle attacks (defaults to the CHISEL_KEY environment
97
97
variable, otherwise a new key is generate each run).
@@ -122,17 +122,24 @@ $ chisel server --help
122
122
--reverse, Allows client to specify reverse port forwarding remotes
123
123
in addition to normal remotes.
124
124
125
- --pid Generate pid file in current directory
125
+ --pid Generate pid file in current working directory
126
126
127
127
-v, Enable verbose logging
128
128
129
129
--help, This help text
130
130
131
+ Signals:
132
+ The chisel process is listening for:
133
+ a SIGUSR2 to print process stats, and
134
+ a SIGHUP to short-circuit the client reconnect timer
135
+
131
136
Version:
132
137
X.Y.Z
133
138
134
139
Read more:
135
140
https://github.com/jpillora/chisel
141
+
142
+
136
143
```
137
144
138
145
```
@@ -170,12 +177,17 @@ $ chisel client --help
170
177
5000:socks
171
178
R:2222:localhost:22
172
179
173
- * When the chisel server has --socks5 enabled, remotes can
180
+ When the chisel server has --socks5 enabled, remotes can
174
181
specify "socks" in place of remote-host and remote-port.
175
182
The default local host and port for a "socks" remote is
176
183
127.0.0.1:1080. Connections to this remote will terminate
177
184
at the server's internal SOCKS5 proxy.
178
185
186
+ When the chisel server has --reverse enabled, remotes can
187
+ be prefixed with R to denote that they are reversed. That
188
+ is, the server will listen and accept connections, and they
189
+ will be proxied through the client which specified the remote.
190
+
179
191
Options:
180
192
181
193
--fingerprint, A *strongly recommended* fingerprint string
@@ -194,27 +206,34 @@ $ chisel client --help
194
206
specify a time with a unit, for example '30s' or '2m'. Defaults
195
207
to '0s' (disabled).
196
208
197
- --proxy, An optional HTTP CONNECT proxy which will be used reach
198
- the chisel server. Authentication can be specified inside the URL.
199
- For example, http://admin:[email protected] :8081
200
-
201
209
--max-retry-count, Maximum number of times to retry before exiting.
202
210
Defaults to unlimited.
203
211
204
212
--max-retry-interval, Maximum wait time before retrying after a
205
213
disconnection. Defaults to 5 minutes.
206
214
207
- --pid Generate pid file in current directory
215
+ --proxy, An optional HTTP CONNECT proxy which will be used reach
216
+ the chisel server. Authentication can be specified inside the URL.
217
+ For example, http://admin:[email protected] :8081
218
+
219
+ --pid Generate pid file in current working directory
208
220
209
221
-v, Enable verbose logging
210
222
211
223
--help, This help text
212
224
225
+ Signals:
226
+ The chisel process is listening for:
227
+ a SIGUSR2 to print process stats, and
228
+ a SIGHUP to short-circuit the client reconnect timer
229
+
213
230
Version:
214
231
X.Y.Z
215
232
216
233
Read more:
217
234
https://github.com/jpillora/chisel
235
+
236
+
218
237
```
219
238
220
239
### Security
@@ -338,13 +357,13 @@ See more [test/](test/)
338
357
339
358
### Changelog
340
359
341
- - ` 1.0.0 ` - Initial release
342
- - ` 1.1.0 ` - Swapped out simple symmetric encryption for ECDSA SSH
343
- - ` 1.2.0 ` - Added SOCKS5 (server) and HTTP CONNECT (client) support
360
+ - ` 1.0 ` - Initial release
361
+ - ` 1.1 ` - Swapped out simple symmetric encryption for ECDSA SSH
362
+ - ` 1.2 ` - Added SOCKS5 (server) and HTTP CONNECT (client) support
363
+ - ` 1.3 ` - Added reverse tunnelling support
344
364
345
365
### Todo
346
366
347
- - Allow clients to act as an indirect tunnel endpoint for other clients
348
367
- Better, faster tests
349
368
- Expose a stats page for proxy throughput
350
369
- Treat client stdin/stdout as a socket
0 commit comments