Comparison of SSH servers
An SSH server is a software program which uses the secure shell protocol to accept connections from remote computers. SFTP/SCP file transfers and remote terminal connections are popular use cases for a SSH server. This article compares a selection of popular servers.
General
Platform
The operating systems or virtual machines the SSH servers are designed to run on without emulation; there are several possibilities:
- No indicates that it does not exist or was never released.
- Partial indicates that while it works, the server lacks important functionality compared to versions for other OSs but may still be under development.
- Beta indicates that while a version is fully functional and has been released, it is still in development (e.g. for stability).
- Yes indicates that it has been officially released in a fully functional, stable version.
- Dropped indicates that while the server works, new versions are no longer being released for the indicated OS; the number in parentheses is the last known stable version which was officially released for that OS.
- Included indicates that the server comes pre-packaged with or has been integrated into the operating system.
The list is not exhaustive, but rather reflects the most common platforms today.
Features
Name |
SSH1 |
SSH2 |
Port forwarding |
SFTP |
SCP |
IPv6 support |
Compatible with OpenSSH authorized keys |
Privilege separation |
Centrally manageable (when multiple SSH servers are in use) |
FIPS-140-2 certified |
Multi-processor support (multi-threaded) |
Support available: community support by volunteers |
Support available: commercial online support |
Support available: commercial telephone support 8x5 |
Support available: commercial telephone support 24x7 |
Support for x509v3 certificates in server authentication |
Support for x509v3 certificates in user authentication |
Support for GSSAPI/Kerberos |
Compatible with RFC 4716 public key format |
Support for UTF-8 |
Easy SFTP jailing/virtual file system |
Support for local/domain user accounts (Windows) |
Key management available |
Configurable domain policies (Windows) |
Support for standard OS log facilities (SMF, Event log, syslog) |
Full SSH server implementation (all SSH basic services are available (varies by platform a bit)) |
Support for network shares (Windows) |
Support for multi-homed machines (multiple independently configurable listeners) |
Support for standard Windows logon types (interactive, batch, network, network-cleartext) |
Support for MVS datasets (zOS) |
CopSSH |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes[5] |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
Dropbear |
No |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
No |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
GoAnywhere Services |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
Lsh |
No |
Yes |
Yes |
Yes |
Yes |
? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
OpenSSH |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes[6] |
Yes[Note 8] |
?? |
?? |
Yes |
?? |
?? |
?? |
?? |
?? |
?? |
No |
?? |
?? |
?? |
Yes[Note 8] |
?? |
?? |
Yes |
?? |
?? |
?? |
No |
Pragma Fortress SSH Server |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
Tectia SSH Server |
No |
Yes |
Yes |
Yes |
Yes |
No[Note 9] |
Yes |
Partial[Note 10] |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
No[Note 9] |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WinSSHD |
No |
Yes |
Yes |
Yes |
Yes |
? |
Yes |
Yes |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
?? |
See also
Notes
- ^ Unless otherwise noted, iPhone refers to non-jailbroken devices.
- ^ a b OpenSSH and Dropbear are available as optware packages installed by PreWare (maintained by WebOS-Internals.org)
- ^ lsh supports only one BSD platform officially, FreeBSD.
- ^ SSHWindows, last release on 2004-07-09
- ^ The majority of Linux distributions have OpenSSH as an official package, but a few do not.
- ^ Openssh 3.4 was the first release included since AIX
- ^ Only for jailbroken devices.
- ^ a b Supported via following products: Tectia Manager
- ^ a b Scheduled to arrive in 2012 for all supported platforms (z/OS, Win, Linux, Unix)
- ^ Different exploit protection mechanism in use
References