在长城宽带等某些垃圾宽带的网络环境下，通过 ssh 连接某些服务器经常会出现 timeout 的解决方法

ssh socks5 proxy

可在 .ssh/config 中配置以下命令，通过 ssh q 连接服务器。 HostName 为目标服务器 ip， -X 5 为 socks5 代理， localhost:6153 为 socks5 代理地址。

Host q
    HostName 47.240.33.24
    User root
    ProxyCommand            nc -X 5 -x localhost:6153 %h %p

与此方法类似的是，可以配置通过跳板机，在客户端直接访问内网服务器。jumper server 为跳板机，在正常情况下，处于内网环境的 target 服务器无法直接从客户端访问，需经过跳板机访问，此时，则可通过如下配置，在 Terminal 中运行 ssh target 访问跳板机后面的目标服务器。

Host target
    HostName 172.16.6.2
    Port 35000
    User root
    IdentityFile /Users/tonywang/target.key
    ProxyCommand ssh -q -W %h:%p jumperserver

Host jumperserver
    HostName 192.168.1.2
    Port 35000
    IdentityFile /Users/tonywang/js.key
    User root

comments powered by Disqus

Tags

abcs accept acid activemq affinity algorithm allocation android array async aws b+tree b-tree backoff benchmark best-practices bfs big-o bigquery bind bitcount blog break broker bubble buffer cache cap cert cgroups channel citus class classmethod closure closures cluster concurrency config consumer container context cookie cors crawler cronjob csrf ctr data-science data-structure database datadog dataflow datascience decorator defer dfs distributed django dns docker double-shipping drf ecosia elastic-search enumerate epoll errgroup escaping extra fabric2 facebook-pixel financial-report flask flutter forward-proxy freelance frontend frp garbage-collector gc gcp generator gesture get gil git golang goroutine graphql ha handbook haproxy hash hash-slot hashring hashtable hpa http http-auth http-proxy http_proxy https index init innodb instagram intergration interview ios javascript jinja2 jobboard jwt k8s kafka kibana kqueue label lambda layer4 layer7 lean levels.io linked-list linux list listen loadbalancer logs long-tail lru marketing master matplotlib memory merge metaclass metaprogramming metrics metrics-server microservices mitm mobile model mq myisam mysql namespace nat netflix network-extension nginx nodejs nomad nosql npm oodesign openssl optimization orm pandas parallelism paramiko parkinglot patroni permission pg pipeline pixelme post postgresql postresql prefetch_related prerender private-key process proxy proxycommand put pvm python queue rabbitmq rbac react-native reactive reactjs rebase redis redis-cluster replication resource rest restfulapi retargeting retry revenue reverse-proxy rocketmq rsa rxswift saas scaffold scaleable search-engine security select seo serverless service session set shadosocks shadowsocks shard sharding shell shopify sigint signal sigterm slack slave slow-query sniper sns socket socks5 source-code spa sql sqlalchemy sqs ssh ssl ssl-pinning stack startup state stateful stateless staticmethod string struct swift swiftui switch syscall system-design systemctl tcp tcp-proxy thread tmpreaper token traefik trustkit tunning type typeform udp userdefaults variable vc vpn vuejs weak web web-development where widget yarn zset 削峰宽索引异步看源码学-golang 窄索引解耦跨域跳板机