SSH数据通道¶

名称: ssh

状态： GA

SSH拨号器使用SSH协议与SSH服务建立数据通道。

SSH拨号器支持简单用户名/密码认证和公钥认证。

用户名/密码认证¶

命令行配置文件

gost -L :8080 -F http+ssh://gost:gost@:8443

services:
- name: service-0
  addr: ":8080"
  handler:
    type: auto
    chain: chain-0
  listener:
    type: tcp
chains:
- name: chain-0
  hops:
  - name: hop-0
    nodes:
    - name: node-0
      addr: :8443
      connector:
        type: http
      dialer:
        type: ssh
        auth:
          username: gost 
          password: gost

认证信息

认证信息作用于拨号器，如果需要对连接器设置认证可以通过配置文件指定

services:
- name: service-0
  addr: ":8080"
  handler:
    type: auto
    chain: chain-0
  listener:
    type: tcp
chains:
- name: chain-0
  hops:
  - name: hop-0
    nodes:
    - name: node-0
      addr: :8443
      connector:
        type: http
        auth:
          username: gost 
          password: gost
      dialer:
        type: ssh

公钥认证¶

命令行配置文件

gost -L :8080 -F http+ssh://gost@:8443?privateKeyFile=/path/to/privateKeyFile

services:
- name: service-0
  addr: ":8080"
  handler:
    type: auto
    chain: chain-0
  listener:
    type: tcp
chains:
- name: chain-0
  hops:
  - name: hop-0
    nodes:
    - name: node-0
      addr: :8443
      connector:
        type: http
      dialer:
        type: ssh
        auth:
          username: gost
        metadata:
          privateKeyFile: /path/to/privateKeyFile
          # optional passphrase for privateKeyFile
          # passphrase: pass
          # passphraseFromKeyring: true  # 从系统密钥环读取密码

参数列表¶

privateKeyFile (string): 证书私钥文件。路径支持~前缀进行家目录扩展（例如~/.ssh/id_rsa）
passphrase (string): 证书密码
passphraseFromKeyring (bool, default=false): 从系统密钥环中读取证书密码。启用此选项后，passphrase参数将被忽略，GOST会通过密钥环读取SSH <privateKeyFile>对应的密码