通过堡垒机连接内网应用

import paramiko

# 堡垒机配置
bastion_host = 'bastion.example.com'
bastion_port = 22
bastion_username = 'bastion_user'
bastion_password = 'bastion_pass'

# 内网服务器配置
target_host = 'internal_server.example.com'
target_port = 22
target_username = 'internal_user'
target_password = 'internal_pass'

# 创建SSH客户端
ssh_client = paramiko.SSHClient()
ssh_client.set_missing_host_key_policy(paramiko.AutoAddPolicy())

# 连接堡垒机
ssh_client.connect(bastion_host, port=bastion_port, username=bastion_username, password=bastion_password)

# 创建SSH隧道
transport = ssh_client.get_transport()
local_port = 10022
remote_port = target_port
transport.request_port_forward('', local_port)

# 连接内网服务器
ssh_client_internal = paramiko.SSHClient()
ssh_client_internal.set_missing_host_key_policy(paramiko.AutoAddPolicy())
ssh_client_internal.connect('localhost', port=local_port, username=target_username, password=target_password)

# 执行命令
stdin, stdout, stderr = ssh_client_internal.exec_command('ls -l')
print(stdout.read().decode())

# 关闭连接
ssh_client_internal.close()
ssh_client.close()