SSH ProxyCommand iyo Aqoonsiga Ku Salaysan Martigeliyaha: Kee Baa Saxeexa?

Bartilmaameedku wuxuu arki karaa xiriir TCP ah oo ka imanaya bastion halka macmiilka SSH ee sameeya aqoonsiga uu weli ku socdo shaqada.

Host behind-bastion
    ProxyCommand ssh -W %h:%p bastion

Halkan kaaliyuhu wuxuu galayaa bastion oo wuxuu ka codsanayaa server-kiisa SSH xiriir loo gudbiyay bartilmaameedka. Macmiilka SSH ee dibadda ee shaqada ayaa isku beddelaya borotokoolka SSH ee bartilmaameedka iyada oo loo marayo qulqulkaas. Bastionku wuxuu bixiyaa gaadiidka; ma uusan bilaabin macmiilka SSH ee wajiga bartilmaameedka.

Farqigaas ayaa muhiim u ah aqoonsiga ku salaysan martigeliyaha. Kaaliyaha ssh-keysign ee OpenSSH wuxuu galayaa furayaasha martigeliyaha maxalliga ah si uu u abuuro saxeexa loo baahan yahay. Cinwaanka isha shabakadda oo ka tirsan bastion kama dhigayo shaqada inay ku saxeexdo furaha martigeliyaha bastion.

Isbarbar dhig tan:

ssh -t bastion ssh target

Tani waxay bilaabaysaa barnaamij SSH kale oo ku yaal bastion. Qaabeyntiisa maxalliga ah iyo furayaasha martigeliyaha ee la heli karo waxay ka tirsan yihiin mashiinkaas, sidaas darteed wuxuu ka qayb qaadan karaa heshiis kalsooni oo ku salaysan martigeliyaha oo hore loo habeeyay inta u dhaxaysa bastion iyo bartilmaameedka. Weli wuxuu u baahan yahay fasaxa u dhigma iyo hubinta magaca bartilmaameedka.

Qaabka labaad wuxuu sidoo kale beddelaa sida fadhiga u shaqeeyo: wuxuu fuliyaa amarka fog oo isticmaala terminal. Ma aha beddelka hufan ee kasta oo wareejinta faylka SSH ama gaadiidka otomaatiga ah. Dooro habaynta iyadoo lagu saleynayo mashiinka ay tahay inuu ku aqoonsado bartilmaameedka, halkii aad daciifin lahayd hubinta kalsoonida server-ka si cinwaanka isha uu u muuqdo mid ku filan.