This service is often referred to as the "system-wide proxy server".

Posix packages should install this proxy server as a system service and update the firewall rules to allow access to its IANA assigned TCP port (`14500`).

This service makes it possible to start and access sessions through a single authenticated port.

# Start via proxy

The `start-via-proxy=yes` option allows servers to start their sessions via this service so that they are registered correctly with the local seats management system (`pam` / `logind`), which should prevent early termination if their controlling shell is destroyed (ie: if the `SSH` session they are started from is terminated).

# Links

- proxy server
- authentication
- system service for the proxy server - original feature ticket
- systemd socket activation
- systemd multi seat support
- `peercred` authentication module
- IANA registration and default port