# 使用 Homebrew, Nix 安装 ghostunnel 查看 ghostunnel 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:ghostunnel ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install ghostunnel ``` 证据: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#ghostunnel ``` 证据: nixpkgs package indexes: pkgs/by-name/gh/ghostunnel/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 软件包事实 - **软件包键:** brew:ghostunnel - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 1.11.2 - **来源摘要:** Simple SSL/TLS proxy with mutual authentication - **主页:** - **仓库:** - **上游文档:** - **许可证:** Apache-2.0 - **源码归档:** - **最后更新:** 2026-07-29T16:05:00+02:00 - **已生成:** 2026-08-04T22:13:35+00:00 ## 可执行文件 - ghostunnel (cli) - ghostunnel (别名) ## 构建依赖 - go ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## 版本和新鲜度 - 页面生成时间: 2026-08-04 - 管理器版本: 1.11.2 - 管理器更新时间: 2026-07-29 - 本地数据: OK - 上游仓库: https://github.com/ghostunnel/ghostunnel - 检测到的最新版本: v1.11.2 (当前) ## 项目历史与用法 Ghostunnel is a Go TLS proxy for placing mutual TLS in front of services that do not speak TLS themselves. ### 项目历史 The Ghostunnel repository was created in 2015 and its first GitHub release, v1.0.0, was published in 2016. Its README frames the project as a simple TLS proxy with mutual authentication for securing non-TLS backend applications. The project evolved around two complementary modes: server mode terminates TLS and forwards to an insecure backend, while client mode accepts local insecure connections and forwards them to a TLS-secured service. Over time the README grew to document certificate reloads, ACME, PKCS#11, macOS Keychain, Windows Certificate Store, SPIFFE Workload API, Prometheus metrics, systemd and launchd socket activation, and Windows service management. ### 采用历史 Ghostunnel's adoption sits in security and operations teams that need a small proxy rather than a full service mesh or general reverse proxy. Official materials point users to GitHub releases and Docker Hub, and the project documents Linux, macOS, Windows, and other Go-supported Unix systems. ### 使用方式 Practitioners use Ghostunnel to wrap legacy TCP services with mutual TLS, add client-certificate authorization, run local TLS clients for remote services, reload short-lived certificates, expose metrics, and deploy the proxy under a service manager. ### 为什么软件包爱好者会关心 Package nerds care about Ghostunnel because it packages a focused security boundary as one executable: install it, provide certificates, and put mTLS in front of a service without rewriting the application. ### 时间线 - 2015: GitHub repository created. - 2016: v1.0.0 initial release published. - 2020s: Documentation covers OPA policies, SPIFFE identities, hardware-backed keys, certificate reloads, metrics, and service-manager deployment. ### Related projects - Ghostunnel is adjacent to stunnel, OpenSSL tooling, mkcert, cfssl, SPIFFE, Open Policy Agent, systemd, launchd, and Docker-based deployment workflows. ### 来源 - - - - - ## 安全说明 narrow executable package without higher-risk signals. - **Geiger 风险:** 绿色 / 低 - narrow executable package without higher-risk signals ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** ghostunnel - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 其他软件包管理器记录 - Nix - ghostunnel: normalized package name match | nixpkgs package indexes: pkgs/by-name/gh/ghostunnel/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## 相关链接 - [Terminal utility packages](https://pkg.so/zh-hans/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/zh-hans/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Security and crypto packages](https://pkg.so/zh-hans/security-crypto-tools/) - Matched security, identity, cryptography, password, signing, or certificate metadata. - [Homebrew utility packages](https://pkg.so/zh-hans/brew-utility-packages/) - Matched Homebrew package provider. - [go](https://pkg.so/zh-hans/brew/go/) - Build dependency declared by Homebrew. - [pure-ftpd](https://pkg.so/zh-hans/brew/pure-ftpd/) - Shares pkgdb curated category or tags: cli, networking, security, tls. - [sing-box](https://pkg.so/zh-hans/brew/sing-box/) - Shares pkgdb curated category or tags: cli, networking, proxy. - [xray](https://pkg.so/zh-hans/brew/xray/) - Shares pkgdb curated category or tags: cli, networking, proxy. - [proxychains-ng](https://pkg.so/zh-hans/brew/proxychains-ng/) - Shares pkgdb curated category or tags: cli, networking, proxy. - [v2ray](https://pkg.so/zh-hans/brew/v2ray/) - Shares pkgdb curated category or tags: cli, networking, proxy. - [hubble](https://pkg.so/zh-hans/brew/hubble/) - Shares pkgdb curated category or tags: cli, networking, security. - [squid](https://pkg.so/zh-hans/brew/squid/) - Shares pkgdb curated category or tags: cli, networking, proxy. - [mihomo](https://pkg.so/zh-hans/brew/mihomo/) - Shares pkgdb curated category or tags: cli, networking, proxy. - [go-camo](https://pkg.so/zh-hans/brew/go-camo/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, networking, proxy, security, tls. - [gost](https://pkg.so/zh-hans/brew/gost/) - Local package facts share a topical domain. Shared terms: cli, networking, proxy, simple. - [overtls](https://pkg.so/zh-hans/brew/overtls/) - Local package facts share a topical domain. Shared terms: cli, networking, proxy, simple. ## Combined YAML source View the package source record on GitHub. [combined/ghostunnel.yml](https://github.com/mxcl/pkgdb/blob/main/combined/ghostunnel.yml) ## 来源 - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph