ssh端口转发

#可访问new2 [root@guangzhou ~]# telnet 106.55.171.53 22 Trying 106.55.171.53... Connected to 106.55.171.53. Escape character is '^]'. SSH-2.0-OpenSSH_7.4  #可访问balance [root@guangzhou ~]# telnet 124.156.143.168 22 Trying 124.156.143.168... Connected to 124.156.143.168. Escape character is '^]'. SSH-2.0-OpenSSH_7.4

#可访问new2
[root@Balance ~]# telnet 106.55.241.99 22 Trying 106.55.241.99... Connected to 106.55.241.99. Escape character is '^]'. SSH-2.0-OpenSSH_7.4

[root@new2 ~]# firewall-cmd --permanent --add-rich-rule='rule family=ipv4 source address="106.55.241.99" drop' success [root@new2 ~]# firewall-cmd --reload success 

# -L startServerIp:targetServerIp:targetServerPort bridgeServerUser@bridgeServerIp
[root@guangzhou ~]# ssh -L 9001:106.55.171.53:22 [email protected] [email protected]'s password: Last failed login: Thu Oct  8 19:29:00 CST 2020 from 61.135.223.109 on ssh:notty There were 8 failed login attempts since the last successful login. Last login: Thu Oct  8 19:26:38 2020 from 106.55.241.99 [root@Balance ~]#

[root@guangzhou ~]# ssh -p 9001 [email protected] The authenticity of host '[127.0.0.1]:9001 ([127.0.0.1]:9001)' can't be established. ECDSA key fingerprint is SHA256:huOuuKbfM9TN6+rpCMjB2Hk0HI4GSF1WCj7gIVyu48I. ECDSA key fingerprint is MD5:0f:55:88:04:62:82:fc:8b:6a:f5:9e:5c:56:e1:0b:cc. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '[127.0.0.1]:9001' (ECDSA) to the list of known hosts. [email protected]'s password: Last failed login: Thu Oct  8 19:29:28 CST 2020 from 213.154.70.102 on ssh:notty There were 832 failed login attempts since the last successful login. Last login: Thu Oct  8 18:41:46 2020 from 106.55.241.99 [root@new2 ~]#

#balance服务器上开启端口转发服务
# -R startServerPort:targetServerIp:targetServerPort -fN startServerIp
[root@Balance ~]# ssh -R 9100:106.55.171.53:22  -fN 106.55.241.99 [email protected]'s password: [root@Balance ~]#

#guangzhou服务器上查看balance端口转发开启的9100端口
[root@guangzhou ~]# ss -ntl State      Recv-Q Send-Q                    Local Address:Port                                   Peer Address:Port LISTEN     0      128                                   *:27017                                             *:* LISTEN     0      511                                   *:6379                                              *:* LISTEN     0      128                                   *:9100                                              *:* LISTEN     0      128                                   *:111                                               *:* LISTEN     0      128                                   *:4369                                              *:* LISTEN     0      128                                   *:22                                                *:* LISTEN     0      80                                   :::3306                                             :::* LISTEN     0      511                                  :::6379                                             :::* LISTEN     0      128                                  :::111                                              :::* LISTEN     0      128                                  :::4369                                             :::* #连接9100端口，确认可以连接上new2服务器
[root@guangzhou ~]# ssh -p 9100 [email protected] The authenticity of host '[127.0.0.1]:9100 ([127.0.0.1]:9100)' can't be established. ECDSA key fingerprint is SHA256:huOuuKbfM9TN6+rpCMjB2Hk0HI4GSF1WCj7gIVyu48I. ECDSA key fingerprint is MD5:0f:55:88:04:62:82:fc:8b:6a:f5:9e:5c:56:e1:0b:cc. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '[127.0.0.1]:9100' (ECDSA) to the list of known hosts. [email protected]'s password: Last failed login: Fri Oct  9 11:28:02 CST 2020 from 61.7.235.211 on ssh:notty There were 3 failed login attempts since the last successful login. Last login: Fri Oct  9 11:26:16 2020 from 117.136.79.20 [root@new2 ~]#

# -D startServerPort -fN bridgeServerIp

#guangzhou服务器上关掉所有ssh连接 [root@guangzhou ~]# killall ssh [root@guangzhou ~]# ssh -D 9200 -fN 124.156.143.168 [email protected]'s password: [root@guangzhou ~]# curl --socks5 127.0.0.1:9200 http://106.55.171.53 hello~ 

#guangzhou服务器使用9001端口通过balance连接new2的3306端口，这里以本地转发为例 [root@guangzhou ~]# ssh -L 9001:106.55.171.53:3306 [email protected] [email protected]'s password: Last failed login: Fri Oct  9 16:10:57 CST 2020 from 124.65.143.22 on ssh:notty There were 476 failed login attempts since the last successful login. Last login: Fri Oct  9 15:49:20 2020 from 117.136.79.20

#guangzhou服务器新开窗口mysql命令行链接测试下 [root@guangzhou ~]# mysql -h127.0.0.1 -P9001 -utest1 -p123456 Welcome to the MariaDB monitor.  Commands end with ; or g. Your MariaDB connection id is 19 Server version: 10.2.31-MariaDB-log MariaDB Server  Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.  Type 'help;' or 'h' for help. Type 'c' to clear the current input statement.  MariaDB [(none)]>

[root@guangzhou ~]# cat pdo.php <?php  $host = "127.0.0.1"; $port = "9001";  $username = "root"; $password = "123456"; $dbname = "test"; $charset = "utf8mb4";  $dsn = "mysql:dbname=$dbname;host=$host";  try{     $pdo = new Pdo($dsn, $username, $password);     $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);    // 设置sql语句查询如果出现问题 就会抛出异常     set_exception_handler("cus_exception_handler"); } catch(PDOException $e){     die("连接失败: ".$e->getMessage()); }  function cus_exception_handler($e) {     die("sql 异常: ".$e->getMessage()); }  //查询数据 $state = $pdo->query("select * from home limit 1");  //  query执行一条SQL语句，如果通过，则返回一个PDOStatement对象,可以直接遍历这个返回的记录集 (query用于select)  $res = $state->fetch(PDO::FETCH_ASSOC);      // 获取结果集中的一行数据  print_r($res); [root@guangzhou ~]# php pdo.php Array (     [home_id] => 34     [profile] => test     [scope] => no     [product] => no     [cooperate] => no     [extension] => n )