qsh, an OpenSSH replacement over QUIC written in Rust
Developed with Claude over a month, qsh and qshd connect faster than OpenSSH and survive a switch to LTE. The maker runs it in production with time-based one-time tokens.
Credits
- Reddit poster Ok-Cut5501 Source ↗
- Repository account VLOD-ZDOV Source ↗
Earliest dated source:
The full story
qsh and qshd are a replacement for OpenSSH written in Rust over QUIC, developed with Claude over about a month. The maker was tired of slow connection set-up and sessions dropping when a laptop switched to LTE. When UDP is blocked it falls back to TLS over TCP after 0.7 s, and the server listens on both.
It accepts the same options as ssh, so scp, sftp, rsync, git and sshfs can run over it, and supports port forwarding of every kind, jump hosts, OpenSSH keys and agents. Sessions survive network outages: after a lost connection qsh reconnects and the shell is still there with the missed output. On a 50 ms link, running a command is 3.4 times faster than with ssh. It adds time-based one-time tokens and a terminal UI for newcomers, needs no certificate generation and can update itself from GitHub.
The maker runs it in production and says it was checked against OpenSSH's known CVEs; output compression is on by default with a documented risk.
How it was done
Tools
Themes
Loading themes…
Sources
From a short post by the maker, so the details are as they tell them.
- Reddit: qsh/qshd - modern replacement for OpenSSHReddit poster: Ok-Cut5501Posted
The maker's post in r/selfhosted.
- The code: github.comRepository account: VLOD-ZDOV
The qsh repository with benchmarks and features.