spb/tools-spboucher-ai

1{2  "slug": "openssh",3  "name": "OpenSSH",4  "aliases": ["ssh", "sshd", "OpenSSH Portable"],5  "vendor": { "name": "OpenBSD Project", "slug": "openbsd", "website": "https://www.openbsd.org" },6  "homepage_url": "https://www.openssh.org/",7  "docs_url": "https://www.openssh.org/manual.html",8  "repo_url": "https://github.com/openssh/openssh-portable",9  "license_url": "https://github.com/openssh/openssh-portable/blob/master/LICENCE",10  "product_type": "application",11  "product_status": "active",12  "summary": "Reference implementation of the SSH protocol from the OpenBSD project: remote shell, file transfer, port forwarding, key agent and certificate authority tooling",13  "description": "OpenSSH is the suite of SSH client and server programs developed by the OpenBSD project and distributed under BSD-style licenses, with a portable branch maintained for Linux, macOS and other systems. It provides `ssh` for encrypted remote shells and command execution, `sshd` as the server, `scp` and `sftp` for file transfer, `ssh-keygen` for keys and certificates, and `ssh-agent` for holding unlocked keys and forwarding them through intermediate hosts.\n\nBeyond login it is a general transport: local, remote and dynamic port forwarding tunnel arbitrary TCP services, `ProxyJump` chains connections through bastions, multiplexed control sockets reuse one connection, and the client configuration file lets operators give short aliases to dozens of hosts with per-host keys and options. Public-key authentication, FIDO/U2F hardware keys and SSH certificates issued by an organizational CA replace passwords, and `sshd_config` directives such as `AllowUsers` and `Match` blocks harden the server.\n\nOpenSSH ships with macOS and virtually every Linux distribution, which is why it remains the substrate for tools such as rsync, Ansible, Git over SSH and cluster orchestration scripts. Its limits are those of a point-to-point tool: it does not manage networks or identities across many machines, and exposing sshd to the internet invites brute-force traffic that tools like Fail2Ban or CrowdSec are commonly deployed to curb.",14  "capabilities": ["Encrypted remote shell and command execution (ssh, sshd)", "File transfer with scp and sftp", "Local, remote and dynamic port forwarding and ProxyJump bastion chaining", "Public-key, certificate and FIDO/U2F hardware-key authentication", "ssh-agent with agent forwarding and connection multiplexing", "Per-host client configuration and server hardening directives"],15  "workflows": ["Administer a fleet of servers through host aliases and key-based login", "Tunnel a database or web port from a remote host to a laptop", "Run rsync, Git and Ansible over SSH transport"],16  "advantages": ["Preinstalled on macOS and Linux", "Decades of security scrutiny from the OpenBSD team", "Permissive licensing and universal tooling support"],17  "limitations": ["Point-to-point tool without network or identity management", "Internet-exposed servers attract brute-force attempts", "Key distribution across many hosts needs external tooling"],18  "prerequisites": ["Network reachability to the server on the SSH port (or through a VPN/tunnel)"],19  "audiences": ["System administrators", "Developers", "Cluster and HPC operators"],20  "alternatives": ["tailscale", "wireguard"],21  "comparison_notes": "Tailscale SSH layers identity-based authentication and tailnet reachability on top of the same protocol, removing key management; WireGuard provides a network tunnel over which plain OpenSSH runs. OpenSSH remains the common denominator that both build on or complement.",22  "categories": [{ "slug": "tunneling-remote-access", "primary": true }],23  "tags": ["ssh", "remote-access", "cli", "open-source", "security", "macos", "linux"],24  "use_cases": ["access-remote-machines", "expose-local-services"],25  "operating_systems": ["linux", "macos", "windows"],26  "execution_modes": ["local", "self-hosted"],27  "interfaces": ["cli"],28  "deployment_models": ["on-premises"],29  "integrations": ["rsync", "Git", "Ansible", "Tailscale", "Fail2Ban"],30  "data_formats": ["OpenSSH key and certificate formats", "ssh_config / sshd_config"],31  "languages": ["C"],32  "source_model": "open-source",33  "license_spdx": "SSH-OpenSSH",34  "pricing_model": ["open-source", "free"],35  "self_hostable": true,36  "sources": [37    { "url": "https://www.openssh.org/", "type": "official_site", "title": "OpenSSH", "supports": ["name", "summary", "vendor"], "checked_at": "2026-11-02", "note": "www.openssh.com redirects here; OpenSSH 10.6 was announced as released 2026-10-06." },38    { "url": "https://www.openssh.org/manual.html", "type": "official_docs", "title": "OpenSSH Manual Pages", "supports": ["capabilities", "data_formats"], "checked_at": "2026-11-02" },39    { "url": "https://github.com/openssh/openssh-portable/blob/master/LICENCE", "type": "license_page", "title": "OpenSSH LICENCE", "supports": ["license_spdx", "source_model"], "checked_at": "2026-11-02", "note": "Composite file: all components under BSD or more permissive licences." }40  ],41  "confidence": "high",42  "uncertainty_note": "The LICENCE file is a composite of BSD-style terms; SSH-OpenSSH is the SPDX identifier for the OpenSSH license text.",43  "discovery_method": "editorial-research",44  "depth": "standard",45  "editorial_status": "reviewed",46  "visibility": "public",47  "featured": false,48  "author": "batch-B2"49}50