This release introduces major improvements, including the highly requested ability to detach and attach sessions, as well as ProxyCommand support. It also ships with significant stability enhancements, resolving memory retention issues, blocking operations, and connection timeouts under high load.

🚀 Features

• Session Management & Attachment (#35): Implement robust session management. You can now detach from sessions without terminating them and safely discard previous terminal output upon reattachment (#39).
• ProxyCommand Support: Added support for ProxyCommand, which implies TCP proxy mode for more flexible routing.
• Network Diagnostics: Added an RTT callback for heartbeat acknowledgements to better monitor connection latency on the client side.

🐛 Bug Fixes

• Windows 11 ARM64 Display: Fixed Neovim (0.12.3) display misalignment on Windows 11 ARM64 by providing exact terminal dimensions during ConPTY creation (removes previous -1 column width offset).
• Hanging Accept Connections (#36): Fixed an issue where parked local connections (e.g., from ssh-add or git commit signing) hung indefinitely if the client never claimed them. These are now properly reaped after a timeout.
• Blocking Operations & Memory Leaks (#37): Resolved critical blocking operations, goroutine leaks, and memory retention issues during connection teardown, stream replacement, and repeated attach cycles. Stream writes are now interruptible.
• Client Concurrency: Fixed potential defer and goroutine bugs caused by named return values, and ensured the active checker is properly initialized before client setup.

🛠 Transport & Recovery Improvements

• Simplified Transport Recovery: Replaced proxy packet replay with PTO (QUIC) and RTO (KCP) resets on reconnect. Packets are now dropped when the backend is unavailable, relying natively on the transport layer to recover lost traffic.
• Crypto Delegation: Removed unnecessary proxy crypto delegation for non-attachable KCP connections.

📚 CI & Documentation

• CI/CD Automation (#38): Added automatic pre-release deployment via GitHub Workflows and fixed GoReleaser SemVer parsing errors.
• Documentation Updates: Updated UDP reconnect and timeout configuration docs, and added new screenshots demonstrating auto-reconnect and tsshd attach sessions.

New Contributors

• @aliceisjustplaying made their first contribution in #36

Full Changelog: v0.1.8...v0.1.9

v0.1.9 Latest

Latest

Compare

Choose a tag to compare

🚨 Key Fix

• Fix protocol corruption (#30): Held the bus lock until the handshake ACK is sent. This prevents diagnostic logs from interleaving with the handshake, which previously caused garbled data and connection issues.

🐛 Bug Fixes

• SSH Config: Improved Match criteria handling and fixed Match Group negations (#31, #32).
• QUIC: Fixed shared configuration mutation to improve stability (#33).
• Reliability:
  • Rejected empty subsystem commands (#34).
  • Fixed shared logging state and garbled input markers (#30).

New Contributors

• @mookim-eth made their first contribution in #31

Full Changelog: v0.1.7...v0.1.8

v0.1.8

Compare

Choose a tag to compare

What's Changed

This release brings several major features and architectural improvements, enhancing connection flexibility, compatibility, and extensibility for developers.

🌟 Major Features

• Support UDP Port Forwarding: Fully supports UDP local and remote port forwarding. You can now route UDP traffic using the -L udp/... or -R udp/... CLI options, or via UdpLocalForward and UdpRemoteForward in your config. Forwarding via unixgram sockets is also supported.
• Support Rootshell Client & Session Attach: Removed the local listener mechanism and introduced the ability to re-attach to an existing server session after a client app relaunch or device reboot. This "attach" capability was specifically implemented to provide first-class support for the rootshell client (a free, Metal-accelerated terminal emulator for iPhone, iPad, Vision Pro, and Mac).
• Middleware Framework for Custom SSH Business Logic: Introduced a powerful middleware framework. Developers can now easily inject custom interactive logic into SSH sessions, leveraging tsshd's underlying capabilities to quickly build custom SSH servers with built-in seamless roaming and low-latency features.

🛠 Configuration & OpenSSH Compatibility

• Priority Configuration File: tsshd now uses $XDG_CONFIG_HOME/tsshd/sshd_config (defaults to ~/.config/tsshd/sshd_config) as the highest-priority configuration file. If present, it takes precedence over the system's OpenSSH configuration.
• OpenSSH-Aligned AcceptEnv Support: Fully implemented AcceptEnv support to align with OpenSSH behavior. It now defaults to accepting LANG and LC_* for better cross-distro compatibility. Additionally, DISPLAY and SSH_AUTH_SOCK are correctly passed to the session environment.
• Honor StreamLocalBindMask and StreamLocalBindUnlink: Aligned Unix Socket remote forwarding behavior with OpenSSH. It now safely unlinks existing sockets before binding and utilizes an inode/dev identity check during exit cleanup to prevent accidentally deleting another process's socket.

🐛 Enhancements & Fixes

• Network & Transport:
  • Added support for custom UDP MTU sizes.
  • Delegated KCP crypto to the proxy layer and fixed stale packet encryption issues across rekeys.
  • Implemented traffic sampling and playback to accelerate QUIC/KCP state recovery.
  • Introduced proactive dummy packet injection to prevent connection deadlocks during re-authentication.
• Connection Stability:
  • Supported per-session discardPendingInput and simplified the discard callback logic.
• Observability & Refactoring:
  • Improved keepalive logging to provide better diagnostics for reconnections and connection stabilization.
  • Suppressed noisy logs generated upon client-initiated UDP connection closures.
  • Optimized error handling and improved overall code readability.

New Contributors

• @chrisfinazzo made their first contribution in #17
• @kitknox made their first contribution in #19
• @ernie made their first contribution in #27

Full Changelog: v0.1.6...v0.1.7

v0.1.7

Compare

Choose a tag to compare

This is a milestone release for tsshd.
It marks the transition from a basic, experimental implementation to a production-ready engineering version that works reliably across most environments.

Special thanks to @Drag0nFly for extensive testing and feedback (trzsz/trzsz-ssh#167).

Highlights

• Fully supports ProxyJump (major refactor and performance improvements)
• UDP-over-TCP support ( for TCP-only networks where UDP is blocked )
• Significantly improved user experience on connection loss and recovery
• Broad networking improvements with solid IPv4 / IPv6 support
• QUIC and KCP stability improvements, including rekey support
• Improved keep-alive logic and reduced unnecessary UDP traffic
• Better terminal compatibility (screen / tmux fixes, escape sequence filtering)

Networking & Forwarding

• Listen on appropriate IPv4 / IPv6 addresses
• Support multiple and discrete port ranges
• Subsystem support and forwarding access control
• X11 forwarding enhancements (X11UseLocalhost, XAuthLocation)
• Optimized ProxyJump forwarding throughput
• Improved QUIC compatibility and packet scheduling

Stability & UX

• Block I/O while disconnected
• Discard pending input/output during client disconnection
• Improved exit handling and debugging
• Fixed screen redraw issues and minor terminal glitches

v0.1.6

Compare

Choose a tag to compare

• Support connection migration #8.
• Fix terminal columns on Windows #7.
• Cleanup forwarding unix socket on exit.

v0.1.5

Compare

Choose a tag to compare

What's Changed

• Support custom port range #2
• Supports closing of sessions when killed #4

New Contributors

• @Hentioe made their first contribution in #4

Full Changelog: v0.1.2...v0.1.3

v0.1.3

Compare

Choose a tag to compare