blocks|key|226391|text|如果要经常使用SSH代理连接，则不必每次都将它们作为参数进行传递。您可以将以下行添加到~/.ssh/config|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|226392|Host+foobar.example.com
++++ProxyCommand++++++++++nc+-X+connect+-x+proxyhost:proxyport+%25h+%25p
++++ServerAliveInterval+++10|code-block|syntax|javascript|226393|然后使用连接|226394|ssh+foobar.example.com|226395|Source+here|226396|entityMap|0|LINK|mutability|MUTABLE|url|http://www.perkin.org.uk/posts/ssh-via-http-proxy-in-osx.html^0|17|D|0|0|0|0|0|B|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@$9|Z|A|10|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|11|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|13|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|14|8|@]|D|@$9|15|A|16|1|17]]|E|$]]|$1|Q|3|-4|5|6|7|18|8|@]|D|@]|E|$]]]|R|$S|$5|T|U|V|E|$W|X]]]]

If your SSH proxy connection is going to be used often, you don't have to pass them as parameters each time. you can add the following lines to <code>~/.ssh/config</code>
<pre><code>Host foobar.example.com
 ProxyCommand nc -X connect -x proxyhost:proxyport %h %p
 ServerAliveInterval 10
</code></pre>
then to connect use
<pre><code>ssh foobar.example.com
</code></pre>
<a href="http://www.perkin.org.uk/posts/ssh-via-http-proxy-in-osx.html" rel="nofollow noreferrer">Source here</a>

blocks|key|9838|text|我使用OSX选项通过-o+"ProxyCommand=nc+-X+5+-x+proxyhost:proxyport+%25h+%25p"上的socks5代理进行连接。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|9839|entityMap^0|A|1I|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

I use <code>-o "ProxyCommand=nc -X 5 -x proxyhost:proxyport %h %p"</code> ssh option to connect through socks5 proxy on OSX.

blocks|key|226430|text|$+which+nc
/bin/nc

$+rpm+-qf+/bin/nc
nmap-ncat-7.40-7.fc26.x86_64

$+ssh+-o+"ProxyCommand+nc+--proxy+<addr[:port]>+%25h+%25p"+USER@HOST

$+ssh+-o+"ProxyCommand+nc+--proxy+<addr[:port]>+--proxy-type+<type>+--proxy-auth+<auth>+%25h+%25p"+USER@HOST|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|226431|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>$ which nc
/bin/nc

$ rpm -qf /bin/nc
nmap-ncat-7.40-7.fc26.x86_64

$ ssh -o "ProxyCommand nc --proxy &lt;addr[:port]&gt; %h %p" USER@HOST

$ ssh -o "ProxyCommand nc --proxy &lt;addr[:port]&gt; --proxy-type &lt;type&gt; --proxy-auth &lt;auth&gt; %h %p" USER@HOST
</code></pre>

blocks|key|226545|text|ProxyCommand+nc+-proxy+xxx.com:8080+%25h+%25p|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|226546|删除-X+connect，改用-proxy。|unstyled|offset|length|style|CODE|226547|对我很管用。|226548|entityMap^0|0|2|A|F|6|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|P|8|@$G|Q|H|R|I|J]|$G|S|H|T|I|J]]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$]]|$1|M|3|-4|5|F|7|V|8|@]|9|@]|A|$]]]|N|$]]

<pre><code>ProxyCommand nc -proxy xxx.com:8080 %h %p
</code></pre>

remove <code>-X connect</code> and use <code>-proxy</code> instead.

Worked for me.

blocks|key|9894|text|我在Ubuntu下的.ssh/config中使用了以下几行(可以用合适的命令行参数代替|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|9895|Host+remhost
++HostName++++++my.host.com
++User++++++++++myuser
++ProxyCommand++nc+-v+-X+5+-x+proxy-ip:1080+%25h+%25p+2>+ssh-err.log
++ServerAliveInterval+30
++ForwardX11+yes|code-block|syntax|javascript|9896|在Msys2中使用它时，在安装gnu-netcat之后，文件ssh-err.log显示选项-X不存在。nc+--help证实了这一点，并似乎表明没有其他选择来处理代理。|9897|所以我安装了openbsd-netcat+(pacman在询问后删除了gnu-netcat，因为它与openbsd-netcat冲突)。乍一看，查看各自的手册页，openbsd-netcat和Ubuntu+netcat似乎非常相似，特别是在选项-X和-x方面。有了这个，我没有遇到任何问题。|9898|entityMap^0|A|B|0|0|F|A|U|B|19|2|1F|9|0|6|E|M|6|Z|A|1E|E|29|E|2V|6|3E|2|3H|2|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|T|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|U|8|@$9|V|A|W|B|C]|$9|X|A|Y|B|C]|$9|Z|A|10|B|C]|$9|11|A|12|B|C]]|D|@]|E|$]]|$1|M|3|N|5|6|7|13|8|@$9|14|A|15|B|C]|$9|16|A|17|B|C]|$9|18|A|19|B|C]|$9|1A|A|1B|B|C]|$9|1C|A|1D|B|C]|$9|1E|A|1F|B|C]|$9|1G|A|1H|B|C]|$9|1I|A|1J|B|C]]|D|@]|E|$]]|$1|O|3|-4|5|6|7|1K|8|@]|D|@]|E|$]]]|P|$]]

I was using the following lines in my <code>.ssh/config</code> (which can be replaced by suitable command line parameters) under Ubuntu

<pre><code>Host remhost
 HostName my.host.com
 User myuser
 ProxyCommand nc -v -X 5 -x proxy-ip:1080 %h %p 2&gt; ssh-err.log
 ServerAliveInterval 30
 ForwardX11 yes
</code></pre>

When using it with Msys2, after installing <code>gnu-netcat</code>, file <code>ssh-err.log</code> showed that option <code>-X</code> does not exist. <code>nc --help</code> confirmed that, and seemed to show that there is no alternative option to handle proxies.

So I installed <code>openbsd-netcat</code> (<code>pacman</code> removed <code>gnu-netcat</code> after asking, since it conflicted with <code>openbsd-netcat</code>). On a first view, and checking the respective man pages, <code>openbsd-netcat</code> and Ubuntu <code>netcat</code> seem to very similar, in particular regarding options <code>-X</code> and <code>-x</code>.
With this, I connected with no problems.

blocks|key|226597|text|这就是我解决这个问题的方法，希望以后能帮助其他人。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|226598|我的系统是debian+10，最小安装。|226599|我也有类似的问题。|226600|git+clone+git@github.com:nothing/nothing.git
Cloning+into+'nothing'...
nc:+invalid+option+--+'x'
nc+-h+for+help
ssh_exchange_identification:+Connection+closed+by+remote+host
fatal:+Could+not+read+from+remote+repository.

Please+make+sure+you+have+the+correct+access+rights
and+the+repository+exists.|code-block|syntax|javascript|226601|或|226602|git+clone+git@github.com:nothing/nothing.git
Cloning+into+'nothing'...
/usr/bin/nc:+invalid+option+--+'X'
nc+-h+for+help
ssh_exchange_identification:+Connection+closed+by+remote+host
fatal:+Could+not+read+from+remote+repository.

Please+make+sure+you+have+the+correct+access+rights
and+the+repository+exists.|226603|所以，我知道nc有不同的版本，比如openbsd-netcat和GNU-netcat，你可以把debian里的nc改成openbsd版本，但我选择改成corkscrew这样的软件，因为系统里nc的两个版本的名字是一样的，很多人都不太理解。我的方法如下。|offset|length|style|CODE|226604|sudo+apt+install+corkscrew|226605|然后。|226606|vim+~/.ssh/config|226607|如下所示更改此文件。|226608|Host+github.com
++++User+git
++++ProxyCommand+corkscrew+192.168.1.22+8118+%25h+%25p|226609|192.168.1.22和8118是我的代理服务器的地址和端口，您应该根据您的服务器地址进行更改。|226610|它工作得很好。|226611|谢谢，@han。|226612|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/users/1840385/han^0|0|0|0|0|0|0|H|E|W|A|23|9|0|0|0|0|0|0|0|C|D|4|0|0|3|4|0|0^^$0|@$1|2|3|4|5|6|7|1I|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1J|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|1K|8|@]|9|@]|A|$]]|$1|F|3|G|5|H|7|1L|8|@]|9|@]|A|$I|J]]|$1|K|3|L|5|6|7|1M|8|@]|9|@]|A|$]]|$1|M|3|N|5|H|7|1N|8|@]|9|@]|A|$I|J]]|$1|O|3|P|5|6|7|1O|8|@$Q|1P|R|1Q|S|T]|$Q|1R|R|1S|S|T]|$Q|1T|R|1U|S|T]]|9|@]|A|$]]|$1|U|3|V|5|H|7|1V|8|@]|9|@]|A|$I|J]]|$1|W|3|X|5|6|7|1W|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|H|7|1X|8|@]|9|@]|A|$I|J]]|$1|10|3|11|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|12|3|13|5|H|7|1Z|8|@]|9|@]|A|$I|J]]|$1|14|3|15|5|6|7|20|8|@$Q|21|R|22|S|T]|$Q|23|R|24|S|T]]|9|@]|A|$]]|$1|16|3|17|5|6|7|25|8|@]|9|@]|A|$]]|$1|18|3|19|5|6|7|26|8|@]|9|@$Q|27|R|28|1|29]]|A|$]]|$1|1A|3|-4|5|6|7|2A|8|@]|9|@]|A|$]]]|1B|$1C|$5|1D|1E|1F|A|$1G|1H]]]]

This is how I solved it, hoping to help others later.
My system is debian 10, and minimal installation.
I also have the same problem like this.
<pre><code>git clone git@github.com:nothing/nothing.git
Cloning into 'nothing'...
nc: invalid option -- 'x'
nc -h for help
ssh_exchange_identification: Connection closed by remote host
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
</code></pre>
Or
<pre><code>git clone git@github.com:nothing/nothing.git
Cloning into 'nothing'...
/usr/bin/nc: invalid option -- 'X'
nc -h for help
ssh_exchange_identification: Connection closed by remote host
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
</code></pre>
So, I know the nc has different versions like <code>openbsd-netcat</code> and <code>GNU-netcat</code>, you can change the nc in debian to the openbsd version, but I choose to change the software like <code>corkscrew</code>, because the names of the two versions of nc in system are same, and many people don’t understand it well. My approach is as follows.
<pre><code>sudo apt install corkscrew
</code></pre>
Then.
<pre><code>vim ~/.ssh/config
</code></pre>
Change this file like this.
<pre><code>Host github.com
 User git
 ProxyCommand corkscrew 192.168.1.22 8118 %h %p
</code></pre>
<code>192.168.1.22</code> and <code>8118</code> is my proxy server's address and port, you should change it according to your server address.
It's work fine.
Thanks <a href="https://stackoverflow.com/users/1840385/han">@han</a>.

blocks|key|226496|text|在我的例子中，因为我在路上有一个跳转主机或堡垒主机，并且因为这些堡垒节点上的签名在被导入到known_hosts文件后发生了变化，所以我只需要从以下文件中删除这些条目/行：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|226497|/Users/a.abdi-kelishami/.ssh/known_hosts|code-block|syntax|javascript|226498|从上面的文件中，删除那些引用堡垒主机的行。|226499|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

In my case since I had a jump host or Bastion host on the way, and because the signatures on these bastion nodes had changed since they were imported into known_hosts file, I just needed to delete those entries/lines from the following file:

<pre><code>/Users/a.abdi-kelishami/.ssh/known_hosts
</code></pre>

From above file, delete those lines referring to the bastion hosts.

blocks|key|226562|text|对有问题的命令尝试使用-o+"ProxyCommand=nc+--proxy+HOST:PORT+%25h+%25p"。它在OEL6上工作，但需要像前面提到的针对OEL7的那样进行修改。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|226563|entityMap^0|B|18|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

Try <code>-o &quot;ProxyCommand=nc --proxy HOST:PORT %h %p&quot;</code> for command in question. It worked on OEL6 but need to modify as mentioned for OEL7.

blocks|key|10016|text|如果有人在CentOS+/+RHEL上得到|type|unstyled|depth|inlineStyleRanges|entityRanges|data|10017|nc:+invalid+option+--+'X'|code-block|syntax|javascript|10018|使用此ProxyCommand|10019|ProxyCommand+nc+--proxy++HOST:PORT+--proxy-type+http+%25h+%25p|10020|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

If anybody on CentOS / RHEL get
<pre><code>nc: invalid option -- 'X'
</code></pre>
use this ProxyCommand
<pre><code>ProxyCommand nc --proxy HOST:PORT --proxy-type http %h %p
</code></pre>

I have no real idea what I'm doing here so please bear that in mind if you can help me!

I am trying to connect to my virtual server through a proxy but I can't connect, it just hangs. I'm assuming this is because it's not getting through our proxy.

I have tried exactly the same thing at home and it works perfectly. I'm on OSX using Terminal to connect.

Can anyone advise me how I can get through the proxy with SSH?

Connect with SSH through a proxy

虚拟服务器

服务器

CentOS

Ubuntu

我不知道我在这里做什么，所以如果你能帮助我，请记住这一点！我正在尝试通过代理连接到我的虚拟服务器，但我无法连接，它只是挂起。我猜这是因为它没有通过我们的代理。我在家里也试过完全一样的方法，而且效果很好。我在OSX上使用终端连接。有人能告诉我如何通过SSH的代理吗？

问通过代理与SSH连接
EN

回答 9

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问通过代理与SSH连接EN

回答 9

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问通过代理与SSH连接
EN