ssh端口转发介绍

奋斗吧
奋斗吧
擅长邻域：未填写

标签： ssh端口转发介绍 MySQL博客 51CTO博客

2023-07-08 18:24:20 118浏览

ssh端口转发介绍，SSH（SecureShell）是一种加密的网络协议，用于安全地远程登录和执行命令。除了远程登录外，SSH还具备其他功能，其中一个重要的功能就是端口转发。SSH端口转发是一种将网络流量从一个端口转发到另一个端口的机制，通过SSH通道进行安全传输。在本文中，我们将详细介绍SSH端口转发的概念、类型和用途。


ssh端口转发介绍

SSH（Secure Shell）是一种加密的网络协议，用于安全地远程登录和执行命令。除了远程登录外，SSH还具备其他功能，其中一个重要的功能就是端口转发。SSH端口转发是一种将网络流量从一个端口转发到另一个端口的机制，通过SSH通道进行安全传输。在本文中，我们将详细介绍SSH端口转发的概念、类型和用途。

0.环境准备

ssh端口转发介绍_nginx

[root@client ~]# nmcli con add con-name static-ens4 ifname ens4 type ethernet ipv4.address 1.1.1.1/24 ipv4.method man
Connection 'static-ens4' (5511e927-ad24-4a51-b787-4d1a7c6b8783) successfully added.
[root@client ~]# nmcli con up static-ens4
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/21)
[root@client ~]# ip add
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:03:00 brd ff:ff:ff:ff:ff:ff
    altname enp0s3
    inet 192.168.1.15/24 brd 192.168.1.255 scope global dynamic noprefixroute ens3
       valid_lft 604259sec preferred_lft 604259sec
    inet6 2409:8a00:7980:4750:250:ff:fe00:300/64 scope global dynamic noprefixroute 
       valid_lft 258661sec preferred_lft 172261sec
    inet6 fe80::250:ff:fe00:300/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: ens4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:03:01 brd ff:ff:ff:ff:ff:ff
    altname enp0s4
    inet 1.1.1.1/24 brd 1.1.1.255 scope global noprefixroute ens4
       valid_lft forever preferred_lft forever
    inet6 fe80::cf12:1f46:5d3f:7471/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:03:02 brd ff:ff:ff:ff:ff:ff
    altname enp0s5
    inet6 fe80::250:ff:fe00:302/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
5: ens6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:03:03 brd ff:ff:ff:ff:ff:ff
    altname enp0s6
    inet6 fe80::250:ff:fe00:303/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
       
#jump
[root@jump ~]# nmcli con add con-name static-ens4 ifname ens4 type ethernet ipv4.address 1.1.1.2/24 ipv4.method man
Connection 'static-ens4' (f2804511-b2e6-4443-a6f6-c00ba9bae307) successfully added.
[root@jump ~]# nmcli con add con-name static-ens5 ifname ens5 type ethernet ipv4.address 2.2.2.1/24 ipv4.method man
Connection 'static-ens5' (ef781136-9f04-4cb5-b09f-bfd1911b6cf3) successfully added.
[root@jump ~]# nmcli con up static-ens4
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/27)
[root@jump ~]# nmcli con up static-ens5
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/28)
[root@jump ~]# ip add
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:02:00 brd ff:ff:ff:ff:ff:ff
    altname enp0s3
    inet 192.168.1.16/24 brd 192.168.1.255 scope global dynamic noprefixroute ens3
       valid_lft 604177sec preferred_lft 604177sec
    inet6 2409:8a00:7980:4750:250:ff:fe00:200/64 scope global dynamic noprefixroute 
       valid_lft 258573sec preferred_lft 172173sec
    inet6 fe80::250:ff:fe00:200/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: ens4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:02:01 brd ff:ff:ff:ff:ff:ff
    altname enp0s4
    inet 1.1.1.2/24 brd 1.1.1.255 scope global noprefixroute ens4
       valid_lft forever preferred_lft forever
    inet6 fe80::dc5c:7926:96ad:32b2/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:02:02 brd ff:ff:ff:ff:ff:ff
    altname enp0s5
    inet 2.2.2.1/24 brd 2.2.2.255 scope global noprefixroute ens5
       valid_lft forever preferred_lft forever
    inet6 fe80::26f5:7f4c:26ae:79db/64 scope link tentative noprefixroute 
       valid_lft forever preferred_lft forever
5: ens6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:02:03 brd ff:ff:ff:ff:ff:ff
    altname enp0s6
    inet6 fe80::250:ff:fe00:203/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
#web
[root@web ~]# nmcli con add con-name static-ens4 ifname ens4 type ethernet ipv4.address 2.2.2.2/24 ipv4.method man
Connection 'static-ens4' (b69bfeee-63c2-469c-a830-0870ddf5c363) successfully added.
[root@web ~]# nmcli con up static-ens4
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/29)
[root@web ~]# ip add
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:01:00 brd ff:ff:ff:ff:ff:ff
    altname enp0s3
    inet 192.168.1.17/24 brd 192.168.1.255 scope global dynamic noprefixroute ens3
       valid_lft 604079sec preferred_lft 604079sec
    inet6 2409:8a00:7980:4750:250:ff:fe00:100/64 scope global dynamic noprefixroute 
       valid_lft 259117sec preferred_lft 172717sec
    inet6 fe80::250:ff:fe00:100/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: ens4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:01:01 brd ff:ff:ff:ff:ff:ff
    altname enp0s4
    inet 2.2.2.2/24 brd 2.2.2.255 scope global noprefixroute ens4
       valid_lft forever preferred_lft forever
    inet6 fe80::ca4f:24b6:f142:a0db/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
4: ens5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:01:02 brd ff:ff:ff:ff:ff:ff
    altname enp0s5
5: ens6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 00:50:00:00:01:03 brd ff:ff:ff:ff:ff:ff
    altname enp0s6
[root@web ~]# yum -y install nginx
[root@web ~]# echo "gby cs" > /usr/share/nginx/html/index.html 
[root@web ~]# systemctl enable nginx --now
Created symlink /etc/systemd/system/multi-user.target.wants/nginx.service → /usr/lib/systemd/system/nginx.service.
[root@web ~]# systemctl stop firewalld
[root@web ~]# curl 127.0.0.1
gby cs

1. 本地静态端口转发（ssh正向代理）

ssh端口转发介绍_ssh_02

[root@jump ~]# ssh -L 8080:127.0.0.1:80 root@2.2.2.2
[root@jump ~]# curl 127.0.0.1:8080
gby cs


#把ssh扔到后台
[root@jump ~]# ssh -fNCL 8080:127.0.0.1:80 root@2.2.2.2
[root@jump ~]# curl 127.0.0.1:8080
gby cs

2. 远程端口静态转发（ssh正向代理）

ssh端口转发介绍_nginx_03

[root@client ~]# ssh -L 8080:2.2.2.2:80 root@1.1.1.2
[root@client ~]# curl 127.0.0.1:8080
gby cs

#把ssh扔到后台
[root@client ~]# ssh -fNCL 8080:2.2.2.2:80 root@1.1.1.2
[root@client ~]# curl 127.0.0.1:8080
gby cs

3. 远程端口静态转发（ssh反向代理）

ssh端口转发介绍_nginx_04

[root@jump ~]# ssh -R 8080:2.2.2.2:80 root@1.1.1.1
[root@client ~]# curl 127.0.0.1:8080
gby cs
#花生壳、todesk、frp原理类似
#把ssh扔到后台
[root@jump ~]# ssh -fNCR 8080:2.2.2.2:80 root@1.1.1.1
[root@client ~]# curl 127.0.0.1:8080
gby cs

4. 动态端口转发（ssh sock5）

ssh端口转发介绍_端口转发_05

[root@client ~]# ssh -D 192.168.1.15:8080 root@1.1.1.2
但是验证的话得用sock工具。做好用crt或者其他客户端去作这个操作

##把ssh扔到后台
[root@client ~]# ssh -fNCD 192.168.1.15:8080 root@1.1.1.2

5. 服务启动端口转发

[root@client ~]# cat /usr/lib/systemd/system/sshd-agent.service
[Unit]
Description=OpenSSH agent
After=network.target

[Service]
Type=forking
ExecStart=/bin/sh -c '/usr/bin/ssh -fNCL 8080:2.2.2.2:80 root@1.1.1.2'

[Install]
WantedBy=multi-user.target
[root@client ~]# systemctl daemon-reload
s[root@client ~]# systemctl start sshd-agent
[root@client ~]# curl 127.0.0.1:8080
gby cs

结束之有话想说

既然申请完https证书之后，就赶紧配置你的网站去吧骚年。?

好博客就要一起分享哦！分享海报

此处可发布评论

评论（0）展开评论

暂无评论，快来写一下吧

展开评论

您可能感兴趣的博客

在线教育第一次课：项目介绍-需求分析-架构搭建

no21-爱旅行第一次课-项目介绍-maven聚合工程-安装centos系统虚拟机

第六次课：动态菜单-后端接口

windows关闭端口号命令

servlet,springmvc,ssm,springboot转发非转发总结

Java个人博客系统ssh个人博客系统家乡特产家乡风景

Java个人博客系统<font color='red'>ssh</font>个人博客系统家乡特产家乡风景

uniapp开发业主端

1.vue的介绍vue脚手架安装使用

web.前端样式CSS属性学习

在线教育第二次课-前端搭建

linux发布springboot项目命令

在线教育项目-教学视频网站

在线教育项目-教学视频网站

js数组对象换json字符串，json字符串转数组对象，json互转

nginx配置ssl证书（http转https）的时候需要注意的一些关键点

第七次课：动态菜单-前端

Springboot开发的大学生宿舍共享厨房系统宿舍自习室宿舍洗衣房系统寝室系统技术文档论文功能部分

java基于ssh的旅游系统

java基于<font color='red'>ssh</font>的旅游系统

java和vue开发的二手车小程序系统租车小程序系统

java和vue开<font color='red'>发</font>的二手车小程序系统租车小程序系统

Java基于ssm的租房求租网站房东直租中介托管房屋出租项目

Java基于ssm的租房求租网站房东直租中<font color='red'>介</font>托管房屋出租项目

4.品牌管理小demo后端

最新Java后端开发面试题总结（春招+秋招+社招）

客服QQ 1913284695