堡垒机连接服务器设置

import paramiko

# 堡垒机配置
bastion_host = 'bastion.example.com'
bastion_port = 22
bastion_username = 'bastion_user'
bastion_password = 'bastion_pass'

# 目标服务器配置
target_host = 'target.example.com'
target_port = 22
target_username = 'target_user'
target_password = 'target_pass'

# 创建SSH客户端
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())

# 连接到堡垒机
ssh.connect(bastion_host, port=bastion_port, username=bastion_username, password=bastion_password)

# 创建新的通道
transport = ssh.get_transport()
dest_addr = (target_host, target_port)
local_addr = ('localhost', 22)
channel = transport.open_channel("direct-tcpip", dest_addr, local_addr)

# 连接到目标服务器
target_ssh = paramiko.SSHClient()
target_ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
target_ssh.connect(target_host, port=target_port, username=target_username, password=target_password, sock=channel)

# 执行命令
stdin, stdout, stderr = target_ssh.exec_command('ls -l')
print(stdout.read().decode())

# 关闭连接
target_ssh.close()
ssh.close()