Term
安全外壳协议(SSH)
Next Token / Wiki

Secure Shell (SSH)

SSH is a protocol for securely operating network services over an unsecured network (RFC 4251), providing encryption and authentication. It is best known for remote login and command-line administration, and is also used for secure file transfer and port forwarding.

Also known as

SSH · Secure Shell Protocol · 安全外壳协议 · Secure Shell

Definition

SSH (Secure Shell) is a protocol designed for securely operating network services over an unsecured network, standardized by the IETF in the RFC 4251 series. It provides encryption, server authentication and optional client authentication.

How it works

The client and server first negotiate encryption algorithms and verify each other’s identity, after which all traffic travels through an encrypted channel. SSH listens on TCP port 22 by default; login uses either passwords or key pairs, with key pairs being the common choice for servers and automation.

Usage

It is most commonly used to log in to a server or VPS for command-line administration, and is also used for SCP/SFTP file transfer, Git remote authentication and port forwarding.

SSH has no direct relationship with an app server: the former is a protocol that secures the transport, while the latter is a runtime that hosts business logic; an administrator typically uses SSH to reach a server and then manages the application server from there.

Sources