服务器如何连接堡垒机

import paramiko
from paramiko import SSHClient
from sshtunnel import SSHTunnelForwarder

# 堡垒机配置
bastion_host = 'bastion.example.com'
bastion_port = 22
bastion_username = 'bastion_user'
bastion_password = 'bastion_password'

# 目标服务器配置
target_host = 'target.example.com'
target_port = 22

# 创建SSH客户端
client = SSHClient()
client.load_system_host_keys()
client.set_missing_host_key_policy(paramiko.AutoAddPolicy())

# 连接到堡垒机
client.connect(bastion_host, port=bastion_port, username=bastion_username, password=bastion_password)

# 创建SSH隧道
tunnel = SSHTunnelForwarder(
    (bastion_host, bastion_port),
    ssh_username=bastion_username,
    ssh_password=bastion_password,
    remote_bind_address=(target_host, target_port)
)

# 启动隧道
tunnel.start()

# 获取隧道本地端口
local_port = tunnel.local_bind_port

print(f'Tunnel established. Access target server at localhost:{local_port}')

# 关闭隧道
tunnel.stop()
client.close()