You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
96 lines
3.2 KiB
Python
96 lines
3.2 KiB
Python
#
|
|
# This file is adapted from a paramiko demo, and thus licensed under LGPL 2.1.
|
|
# Original Copyright (C) 2003-2007 Robey Pointer <robeypointer@gmail.com>
|
|
# Edits Copyright (C) 2010 The IPython Team
|
|
#
|
|
# Paramiko is free software; you can redistribute it and/or modify it under the
|
|
# terms of the GNU Lesser General Public License as published by the Free
|
|
# Software Foundation; either version 2.1 of the License, or (at your option)
|
|
# any later version.
|
|
#
|
|
# Paramiko is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
|
|
# A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more
|
|
# details.
|
|
#
|
|
# You should have received a copy of the GNU Lesser General Public License
|
|
# along with Paramiko; if not, see <https://www.gnu.org/licenses/>.
|
|
|
|
"""
|
|
Sample script showing how to do local port forwarding over paramiko.
|
|
|
|
This script connects to the requested SSH server and sets up local port
|
|
forwarding (the openssh -L option) from a local port through a tunneled
|
|
connection to a destination reachable from the SSH server machine.
|
|
"""
|
|
|
|
import logging
|
|
import select
|
|
import socketserver
|
|
|
|
logger = logging.getLogger('ssh')
|
|
|
|
|
|
class ForwardServer(socketserver.ThreadingTCPServer):
|
|
daemon_threads = True
|
|
allow_reuse_address = True
|
|
|
|
|
|
class Handler(socketserver.BaseRequestHandler):
|
|
def handle(self):
|
|
try:
|
|
chan = self.ssh_transport.open_channel(
|
|
'direct-tcpip',
|
|
(self.chain_host, self.chain_port),
|
|
self.request.getpeername(),
|
|
)
|
|
except Exception as e:
|
|
logger.debug(
|
|
'Incoming request to %s:%d failed: %r',
|
|
self.chain_host,
|
|
self.chain_port,
|
|
e,
|
|
)
|
|
return
|
|
if chan is None:
|
|
logger.debug(
|
|
'Incoming request to %s:%d was rejected by the SSH server.',
|
|
self.chain_host,
|
|
self.chain_port,
|
|
)
|
|
return
|
|
|
|
logger.debug(
|
|
f'Connected! Tunnel open {self.request.getpeername()!r} -> {chan.getpeername()!r} -> {(self.chain_host, self.chain_port)!r}'
|
|
)
|
|
while True:
|
|
r, w, x = select.select([self.request, chan], [], [])
|
|
if self.request in r:
|
|
data = self.request.recv(1024)
|
|
if len(data) == 0:
|
|
break
|
|
chan.send(data)
|
|
if chan in r:
|
|
data = chan.recv(1024)
|
|
if len(data) == 0:
|
|
break
|
|
self.request.send(data)
|
|
chan.close()
|
|
self.request.close()
|
|
logger.debug('Tunnel closed ')
|
|
|
|
|
|
def forward_tunnel(local_port, remote_host, remote_port, transport):
|
|
# this is a little convoluted, but lets me configure things for the Handler
|
|
# object. (SocketServer doesn't give Handlers any way to access the outer
|
|
# server normally.)
|
|
class SubHander(Handler):
|
|
chain_host = remote_host
|
|
chain_port = remote_port
|
|
ssh_transport = transport
|
|
|
|
ForwardServer(('127.0.0.1', local_port), SubHander).serve_forever()
|
|
|
|
|
|
__all__ = ['forward_tunnel']
|