https://benelin.site/tags/proxyjump/字节飞鸿Hugo 0.157.0 & FixIt v0.4.4-20260308100717-fe7105a3zh-cngoupgrade@outlook.com (beneliu)goupgrade@outlook.com (beneliu)Wed, 01 Jul 2026 16:11:36 +0800https://benelin.site/posts/devops/1180278/Wed, 01 Jul 2026 16:11:36 +0800goupgrade@outlook.com (beneliu)https://benelin.site/posts/devops/1180278/Devops<div class="details admonition info open"> <div class="details-summary admonition-title"><i class="icon fa-solid fa-circle-info" aria-hidden="true"></i>内容简介<i class="details-icon fa-solid fa-angle-right" aria-hidden="true"></i></div><div class="details-content"> <div class="admonition-content">介绍SSH ProxyJump的原理和配置。</div> </div> </div> <p>SSH ProxyJump 是 OpenSSH 原生支持的一种现代网络代理功能，专门用于通过中间服务器（通常称为“跳板机”或“堡垒机”）安全地连接到无法直接访问的目标服务器。</p> <h2 class="heading-element" id="背景"><span>背景</span> <a href="#%e8%83%8c%e6%99%af" class="heading-mark"> <svg class="octicon octicon-link" viewBox="0 0 16 16" version="1.1" width="16" height="16" aria-hidden="true"><path d="m7.775 3.275 1.25-1.25a3.5 3.5 0 1 1 4.95 4.95l-2.5 2.5a3.5 3.5 0 0 1-4.95 0 .751.751 0 0 1 .018-1.042.751.751 0 0 1 1.042-.018 1.998 1.998 0 0 0 2.83 0l2.5-2.5a2.002 2.002 0 0 0-2.83-2.83l-1.25 1.25a.751.751 0 0 1-1.042-.018.751.751 0 0 1-.018-1.042Zm-4.69 9.64a1.998 1.998 0 0 0 2.83 0l1.25-1.25a.751.751 0 0 1 1.042.018.751.751 0 0 1 .018 1.042l-1.25 1.25a3.5 3.5 0 1 1-4.95-4.95l2.5-2.5a3.5 3.5 0 0 1 4.95 0 .751.751 0 0 1-.018 1.042.751.751 0 0 1-1.042.018 1.998 1.998 0 0 0-2.83 0l-2.5 2.5a1.998 1.998 0 0 0 0 2.83Z"></path></svg> </a> </h2><p>在日常运维或开发工作中，我们常常需要访问部署在内网的服务器。然而出于安全策略或网络拓扑的限制，内网服务器并不会直接向外部暴露端口，导致我们无法直连。此时，跳板机（Jump Host/Bastion Host）就成了必不可少的中转：</p>