sstp-server

A Secure Socket Tunneling Protocol (SSTP) server implemented by Python.

Requirements

• Python >= 3.12
• pppd

Crypto Binding is supported using SSTP ppp API plug-in sstp-pppd-plugin.so from sstp-client.

Install

For a quick test, you can use uv to run it:

uvx --from sstp-server sstpd --help

Run unreleased GitHub version with uvx:

uvx --from git+https://github.com/sorz/sstp-server sstpd --help

Traditional pip install is also possible:

pip install sstp-server
sstpd --help

For a production deployment, you may want create virutal env fisrt, then run sstpd with a service manager e.g. systemd.

Arch Linux user may install sstp-server package from AUR.

If you share the authentication with services other than SSTP (for example, a RADIUS server that serve both a SSTP and WiFi authentication), crypto binding is required to prevent MITM attacks. Crypto binding is enabled automatically if sstp-pppd-plugin.so is avaliable, see #37 for instructions.

Usage

Create pppd configure file /etc/ppp/options.sstpd,

A example:

name sstpd
require-mschap-v2
nologfd
nodefaultroute
ms-dns 8.8.8.8
ms-dns 8.8.4.4

Start server:

sudo sstpd -p 443 -c cert.pem -k key.pem --local 10.0.0.1 --remote 10.0.0.0/24

Or:

sudo sstpd -f /path/to/sstpd-server.ini -s site1

Known Issues

• High CPU usage, may not suitable for high thougthput applications.