아따 많이도 찾아봤었네 -_-
집에는 라즈베리 하나 켜놓고 회사에 켠 녀석을 집으로 SSH 접속하게 하고
집에서는 내부 아이피로 역으로 접속할수 있는 시스템을 만들려고 하는 중
[링크 : https://manpages.ubuntu.com/manpages/jammy/man1/autossh.1.html]
[링크 : https://lstm.tistory.com/10]
[링크 : https://m.clien.net/service/board/cm_linux/4344761]
[링크 : https://sangwonyoon.tistory.com/m/entry/Autossh로-SSH-연결-유지하기]
2018.05.14 - [프로그램 사용/ssh scp sftp] - reverse SSH
2021.01.03 - [프로그램 사용/ssh scp sftp] - reverse ssh
-------------------
2026.05.13
아래 링크의 옵션 참조했음
[링크 : https://donotlimityourself.tistory.com/33[
private(회사)
원격지에 2222 포트로 현재 pc의 22번 포트를 돌린다~ 라는 의미 인듯한데
그래서 listen에 추가로 포트가 열리지도 않았고, 정상적으로 실행이 되는 건가 보다.
$ ssh minimonk@집SSH도메인 -p 8022 -f -N -T -R 2222:localhost:22
minimonk@집SSH도메인's password:
$ ps -ef | grep ssh
root 900 1 0 5월12 ? 00:00:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root 2298 900 0 5월12 ? 00:00:00 sshd: minimonk [priv]
minimonk 2385 2298 0 5월12 ? 00:05:27 sshd: minimonk@pts/0
root 5656 900 0 5월12 ? 00:00:00 sshd: minimonk [priv]
minimonk 5735 5656 0 5월12 ? 00:00:00 sshd: minimonk@pts/7
minimonk 10717 1 0 09:58 ? 00:00:00 ssh minimonk@집SSH도메인 -p 8022 -f -N -T -R 2222:localhost:22
minimonk 10719 5736 0 09:58 pts/7 00:00:00 grep --color=auto ssh
$ netstat -tnlp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:39557 0.0.0.0:* LISTEN 3128/language_serve
tcp 0 0 127.0.0.1:5803 0.0.0.0:* LISTEN 5350/llama-server
tcp 0 0 127.0.0.1:38605 0.0.0.0:* LISTEN 3128/language_serve
tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:6012 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:45837 0.0.0.0:* LISTEN 6184/language_serve
tcp 0 0 0.0.0.0:7860 0.0.0.0:* LISTEN 5584/venv/bin/pytho
tcp 0 0 127.0.0.1:36141 0.0.0.0:* LISTEN 6184/language_serve
tcp 0 0 127.0.0.1:36197 0.0.0.0:* LISTEN 6184/language_serve
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:44747 0.0.0.0:* LISTEN 3016/antigravity
tcp 0 0 127.0.0.1:35159 0.0.0.0:* LISTEN 6061/exe
tcp 0 0 127.0.0.1:34279 0.0.0.0:* LISTEN 3016/antigravity
tcp 0 0 127.0.0.53:53 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN -
tcp6 0 0 :::5900 :::* LISTEN 1502/gnome-remote-d
tcp6 0 0 ::1:631 :::* LISTEN -
tcp6 0 0 :::8080 :::* LISTEN 5256/./llama-swap
tcp6 0 0 :::22 :::* LISTEN -
tcp6 0 0 ::1:6010 :::* LISTEN -
tcp6 0 0 ::1:6012 :::* LISTEN -
tcp6 0 0 :::3389 :::* LISTEN 1502/gnome-remote-d |
public(내 집)
접속전
$ netstat -tnlp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
접속후
$ netstat -tnlp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:2222 0.0.0.0:* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
tcp6 0 0 ::1:2222 :::* LISTEN -
|
SSH 옵션을 보면 -fNTR 에서 -f이 백그라운드로 뜨게 하느것이고
NT는 터미널 관련, 명령 실행 관련
R은 원격지 포트에 내껄 붙인다는 의미
역시 NTR은 좋은것이여... (응?)
-f Requests ssh to go to background just before command execution.
This is useful if ssh is going to ask for passwords or
passphrases, but the user wants it in the background. This im‐
plies -n. The recommended way to start X11 programs at a remote
site is with something like ssh -f host xterm.
If the ExitOnForwardFailure configuration option is set to “yes”,
then a client started with -f will wait for all remote port for‐
wards to be successfully established before placing itself in the
background. Refer to the description of ForkAfterAuthentication
in ssh_config(5) for details.
-N Do not execute a remote command. This is useful for just for‐
warding ports. Refer to the description of SessionType in
ssh_config(5) for details.
-T Disable pseudo-terminal allocation.
-R [bind_address:]port:host:hostport
-R [bind_address:]port:local_socket
-R remote_socket:host:hostport
-R remote_socket:local_socket
-R [bind_address:]port
Specifies that connections to the given TCP port or Unix socket
on the remote (server) host are to be forwarded to the local
side. |
이제 autossh를 설치하고
$ sudo apt-get install autossh
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following NEW packages will be installed:
autossh
0 upgraded, 1 newly installed, 0 to remove and 47 not upgraded.
Need to get 29.2 kB of archives.
After this operation, 89.1 kB of additional disk space will be used.
Get:1 http://kr.archive.ubuntu.com/ubuntu jammy/universe amd64 autossh amd64 1.4g-1 [29.2 kB]
Fetched 29.2 kB in 0s (217 kB/s)
Selecting previously unselected package autossh.
(Reading database ... 322586 files and directories currently installed.)
Preparing to unpack .../autossh_1.4g-1_amd64.deb ...
Unpacking autossh (1.4g-1) ...
Setting up autossh (1.4g-1) ...
Processing triggers for man-db (2.10.2-1) ... |
public 쪽에 로그인이 되도록 키를 복사하려는데 안되네 -_-???
아무튼 키를 생성하고 해주면 끝
$ ssh-copy-id -p 8022 minimonk@집SSH도메인
/usr/bin/ssh-copy-id: ERROR: No identities found
$ ssh-keygen |
-f 를 넣으면 키를 넣어줘도 로그인이 안되서 일단 빼고 하니 되긴한데..
| $ autossh -M -0 -o "ServerAliveinterval 30" -o "ServerAliveCountMax 3" -T -R 2222:localhost:22 minimonk@집SSH도메인 -p 2022 |
[링크 : https://sangwonyoon.tistory.com/entry/Autossh로-SSH-연결-유지하기]
autossh가 죽으면 어쩌지 싶어서 데몬으로 된 거 없나 찾아 봐야 할 듯.
[링크 : https://tecadmin.net/autossh-persistent-ssh-connections/]
+
여러 번의 인자를 사용하면 복수의 포트를 포워딩 할 수 있다.
| ssh remote-host -L 8822:REMOTE_IP_1:22 -L 9922:REMOTE_IP_2:22 |
[링크 : https://stackoverflow.com/questions/29936948/ssh-l-forward-multiple-ports]
+
아래를 public 쪽 sshd_config 에 설정해주고 sshd를 재기동하고
$ cat /etc/ssh/sshd_config
# GatewayPorts no
GatewayPorts yes
$ sudo systemctl restart sshd |
2222 대신 0.0.0.0:2222 라고 입력하고 실행하면
| $ ssh minimonk@집SSH도메인 -p 8022 -f -N -T -R 0.0.0.0:2222:localhost:22 |
localhost로 되어있던걸
$ netstat -tnlp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:2222 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
tcp6 0 0 ::1:2222 :::* LISTEN -
tcp6 0 0 ::1:6010 :::* LISTEN - |
0.0.0.0 으로 바꾸어서 public 서버의 서비스 인것 처럼 붙일수도 있다.
$ netstat -tnlp
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:2222 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:6010 0.0.0.0:* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
tcp6 0 0 :::2222 :::* LISTEN -
tcp6 0 0 ::1:6010 :::* LISTEN - |
