Ssh设置代理

背景

有些主机有些端口有访问限制，
比如只有办公室网络可以访问，
比如有两个集群，192.168.107.* 192.168.106.*，
107的服务，限制ip访问，106集群不能访问。

socks5代理:

ssh -gR 1111:localhost:22 n1
本地服务映射到远程

ssh -gL 2222:localhost:32567 n1
远程服务，通过本地端口访问

ssh -p 1111 -gD 4444 yiping@localhost
远程4444端口作为n1代理访问

http(s)代理:

本机1080端口启动http

# encoding:utf-8
import socket
import _thread


class Header:
   """
   用于读取和解析头信息
   """

   def __init__(self, conn):
       self._method = None
       header = b''
       try:
           while 1:
               data = conn.recv(4096)
               header = b"%s%s" % (header, data)
               if header.endswith(b'\r\n\r\n') or (not data):
                   break
       except:
           pass
       self._header = header
       self.header_list = header.split(b'\r\n')
       self._host = None
       self._port = None

   def get_method(self):
       """
       获取请求方式
       :return:
       """
       if self._method is None:
           self._method = self._header[:self._header.index(b' ')]
       return self._method

   def get_host_info(self):
       """
       获取目标主机的ip和端口
       :return:
       """
       if self._host is None:
           method = self.get_method()
           line = self.header_list[0].decode('utf8')
           if method == b"CONNECT":
               host = line.split(' ')[1]
               if ':' in host:
                   host, port = host.split(':')
               else:
                   port = 443
           else:
               for i in self.header_list:
                   if i.startswith(b"Host:"):
                       host = i.split(b" ")
                       if len(host) < 2:
                           continue
                       host = host[1].decode('utf8')
                       break
               else:
                   host = line.split('/')[2]
               if ':' in host:
                   host, port = host.split(':')
               else:
                   port = 80
           self._host = host
           self._port = int(port)
       return self._host, self._port

   @property
   def data(self):
       """
       返回头部数据
       :return:
       """
       return self._header

   def is_ssl(self):
       """
       判断是否为 https协议
       :return:
       """
       if self.get_method() == b'CONNECT':
           return True
       return False

   def __repr__(self):
       return str(self._header.decode("utf8"))


def communicate(sock1, sock2):
   """
   socket之间的数据交换
   :param sock1:
   :param sock2:
   :return:
   """
   try:
       while 1:
           data = sock1.recv(1024)
           if not data:
               return
           sock2.sendall(data)
   except:
       pass


def handle(client):
   """
   处理连接进来的客户端
   :param client:
   :return:
   """
   timeout = 60
   client.settimeout(timeout)
   header = Header(client)
   if not header.data:
       client.close()
       return
   print(*header.get_host_info(), header.get_method())
   server = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
   try:
       server.connect(header.get_host_info())
       server.settimeout(timeout)
       if header.is_ssl():
           data = b"HTTP/1.0 200 Connection Established\r\n\r\n"
           client.sendall(data)
           _thread.start_new_thread(communicate, (client, server))
       else:
           server.sendall(header.data)
       communicate(server, client)
   except:
       server.close()
       client.close()


def serve(ip, port):
   """
   代理服务
   :param ip:
   :param port:
   :return:
   """
   s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
   s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
   s.bind((ip, port))
   s.listen(10)
   print('proxy start...')
   while True:
       conn, addr = s.accept()
       _thread.start_new_thread(handle, (conn,))


if __name__ == '__main__':
   IP = "0.0.0.0"
   PORT = 1080
   serve(IP, PORT)

本机ssh映射到远程
ssh -gR 1111:localhost:22 n1

远程映射转发代理到本机
ssh -p 1111 -gL 4444:localhost:1080 yiping@localhost