ping -M do -s 1500 your-hk-server.com<\/code><\/pre>\n<\/li>\n
\u6e2c\u8a66\u66ff\u4ee3SSH\u57e0\uff1a<\/strong>\n
ssh -p 2222 user@your-hk-server.com -v<\/code><\/pre>\n<\/li>\n<\/ol>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u4f3a\u670d\u5668\u7aef\u914d\u7f6e\u6aa2\u67e5<\/strong><\/h2>\n
\u5982\u679c\u4f60\u6709\u5176\u4ed6\u5b58\u53d6\u65b9\u5f0f\uff08\u5982\u7db2\u9801\u63a7\u5236\u53f0\uff09\uff0c\u8acb\u9a57\u8b49\u9019\u4e9b\u4f3a\u670d\u5668\u7aef\u914d\u7f6e\uff1a<\/p>\n
# \u6aa2\u67e5SSH\u670d\u52d9\u72c0\u614b\r\nsystemctl status sshd\r\n\r\n# \u67e5\u770bSSH\u65e5\u8a8c\r\ntail -f \/var\/log\/auth.log\r\n\r\n# \u9a57\u8b49\u9632\u706b\u7246\u898f\u5247\r\niptables -L | grep 22<\/code><\/pre>\n
\u5e38\u898b\u7684\u932f\u8aa4\u914d\u7f6e\u5305\u62ec\u904e\u65bc\u56b4\u683c\u7684\u9632\u706b\u7246\u898f\u5247\u548c\u4e0d\u6b63\u78ba\u7684SSH\u670d\u52d9\u914d\u7f6e\u3002\u4ee5\u4e0b\u662f\u4e00\u500b\u6b63\u78ba\u7684SSH\u914d\u7f6e\u7bc4\u4f8b\uff1a<\/p>\n
# \/etc\/ssh\/sshd_config\r\nPort 22\r\nListenAddress 0.0.0.0\r\nPermitRootLogin prohibit-password\r\nPasswordAuthentication yes\r\nPubkeyAuthentication yes\r\nMaxAuthTries 6<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u8a8d\u8b49\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
\u57fa\u65bc\u91d1\u9470\u7684\u8a8d\u8b49\u554f\u984c\u9700\u8981\u4ed4\u7d30\u6ce8\u610f\u6b0a\u9650\u548c\u6a94\u6848\u683c\u5f0f\u3002\u9a57\u8b49\u4f60\u7684\u8a2d\u5b9a\uff1a<\/p>\n
# \u672c\u5730\u6a5f\u5668\r\nchmod 600 ~\/.ssh\/id_rsa\r\nchmod 644 ~\/.ssh\/id_rsa.pub\r\n\r\n# \u9060\u7aef\u4f3a\u670d\u5668\r\nchmod 700 ~\/.ssh\r\nchmod 644 ~\/.ssh\/authorized_keys<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u9032\u968e\u5075\u932f\u6280\u8853<\/strong><\/h2>\n
\u7576\u6a19\u6e96\u6545\u969c\u6392\u9664\u65b9\u6cd5\u5931\u6548\u6642\uff0c\u662f\u6642\u5019\u4f7f\u7528\u9032\u968e\u5075\u932f\u4e86\u3002\u4ee5\u4e0b\u662f\u4f60\u7684\u5c08\u696d\u5de5\u5177\u5305\uff1a<\/p>\n
# \u555f\u7528\u8a73\u7d30SSH\u5075\u932f\r\nssh -vvv user@your-hk-server.com\r\n\r\n# \u76e3\u63a7\u7db2\u8def\u6d41\u91cf\r\ntcpdump -i any port 22 -n\r\n\r\n# \u6aa2\u67e5\u901f\u7387\u9650\u5236\r\nfail2ban-client status sshd<\/code><\/pre>\n
\u5c08\u696d\u63d0\u793a\uff1a\u5728\u4f60\u7684 ~\/.bashrc \u4e2d\u5efa\u7acb\u9019\u500b\u5075\u932f\u5225\u540d\uff1a<\/p>\n
alias ssh-debug='function _ssh_debug() {\r\n    ssh -vvv \"$@\" 2>&1 | tee ~\/ssh-debug-$(date +%F-%H%M%S).log\r\n}; _ssh_debug'<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u5be6\u73fe\u6545\u969c\u5b89\u5168\u5b58\u53d6<\/strong><\/h2>\n
\u6c38\u9060\u4e0d\u8981\u628a\u81ea\u5df1\u9396\u5728\u5916\u9762\u3002\u5be6\u65bd\u9019\u4e9b\u5197\u9918\u63aa\u65bd\uff1a<\/p>\n
\n
\u914d\u7f6e\u5099\u7528SSH\u57e0\uff1a<\/strong>\n
Port 22\r\nPort 2222  # \u5099\u7528\u57e0<\/code><\/pre>\n<\/li>\n
\u8a2d\u5b9a\u9023\u7dda\u591a\u5de5\uff1a<\/strong>\n
# ~\/.ssh\/config\r\nHost hk-server\r\n    HostName your-hk-server.com\r\n    ControlMaster auto\r\n    ControlPath ~\/.ssh\/control-%h-%p-%r\r\n    ControlPersist 1h<\/code><\/pre>\n<\/li>\n<\/ol>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u6548\u80fd\u6700\u4f73\u5316<\/strong><\/h2>\n
\u4f7f\u7528\u9019\u4e9b\u6700\u4f73\u5316\u4f86\u52a0\u901fSSH\u9023\u7dda\uff1a<\/p>\n
# \u7528\u6236\u7aef ~\/.ssh\/config\r\nHost *\r\n    Compression yes\r\n    TCPKeepAlive yes\r\n    ServerAliveInterval 60\r\n    ServerAliveCountMax 3\r\n    \r\n# \u4f3a\u670d\u5668\u7aef \/etc\/ssh\/sshd_config\r\nUseDNS no\r\nGSSAPIAuthentication no\r\nClientAliveInterval 60\r\nClientAliveCountMax 3<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u5b89\u5168\u6700\u4f73\u5be6\u8e10<\/strong><\/h2>\n
\u4f7f\u7528\u9019\u4e9b\u7d93\u904e\u5be6\u6230\u6aa2\u9a57\u7684\u914d\u7f6e\u4f86\u589e\u5f37\u4f60\u7684SSH\u5b89\u5168\u6027\uff1a<\/p>\n
# \u751f\u6210ED25519\u91d1\u9470\uff08\u73fe\u4ee3\uff0c\u5b89\u5168\uff09\r\nssh-keygen -t ed25519 -a 100\r\n\r\n# \u914d\u7f6eSSH\u5f37\u5316\r\nProtocol 2\r\nMaxAuthTries 3\r\nPermitEmptyPasswords no\r\nX11Forwarding no\r\nAllowAgentForwarding no\r\nAllowTcpForwarding yes\r\nPrintLastLog yes<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u76e3\u63a7\u548c\u9810\u9632<\/strong><\/h2>\n
\u4f7f\u7528\u9019\u500b\u7c21\u55ae\u7684bash\u6307\u4ee4\u78bc\u5be6\u73fe\u4e3b\u52d5\u76e3\u63a7\uff1a<\/p>\n
#!\/bin\/bash\r\nCHECK_HOST=\"your-hk-server.com\"\r\nCHECK_PORT=22\r\n\r\nnc -zv $CHECK_HOST $CHECK_PORT &>\/dev\/null\r\nif [ $? -ne 0 ]; then\r\n    echo \"SSH connection failed at $(date)\"\r\n    # \u5728\u6b64\u52a0\u5165\u4f60\u7684\u901a\u77e5\u547d\u4ee4\r\n    exit 1\r\nfi<\/code><\/pre>\n
\u4f60\u7684\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u9ad4\u9a57\u4e0d\u5fc5\u88abSSH\u9023\u7dda\u554f\u984c\u6240\u56f0\u64fe\u3002\u9019\u4e9b\u6280\u8853\u89e3\u6c7a\u65b9\u6848\u70ba\u53ef\u9760\u7684\u4f3a\u670d\u5668\u5b58\u53d6\u63d0\u4f9b\u4e86\u7a69\u56fa\u7684\u57fa\u790e\u3002\u8acb\u8a18\u4f4f\u5728\u61c9\u7528\u5230\u6b63\u5f0f\u904b\u4f5c\u4f3a\u670d\u5668\u4e4b\u524d\uff0c\u5728\u53d7\u63a7\u74b0\u5883\u4e2d\u6e2c\u8a66\u6240\u6709\u914d\u7f6e\u3002<\/p>\n
\u5c0d\u65bc\u6301\u7e8c\u5b58\u5728\u7684\u554f\u984c\uff0c\u8acb\u6aa2\u67e5\u60a8\u9023\u63a5\u5230\u9999\u6e2f\u8cc7\u6599\u4e2d\u5fc3\u7684\u7db2\u8def\u8def\u7531\uff0c\u8003\u616e\u4f7f\u7528VPN\u670d\u52d9\uff0c\u6216\u8aee\u8a62\u60a8\u7684\u4f3a\u670d\u5668\u79df\u7528\u4f9b\u61c9\u5546\u7684\u6280\u8853\u652f\u63f4\u5718\u968a\uff0c\u7372\u53d6\u91dd\u5c0d\u5177\u9ad4\u74b0\u5883\u7684\u6700\u4f73\u5316\u5efa\u8b70\u3002<\/p>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u5feb\u901f\u53c3\u8003\u6545\u969c\u6392\u9664\u6d41\u7a0b\u5716<\/strong><\/h2>\n
\u5075\u932fSSH\u554f\u984c\u6642\uff0c\u8acb\u9075\u5faa\u4ee5\u4e0b\u7cfb\u7d71\u65b9\u6cd5\uff1a<\/p>\n
1. \u57fa\u790e\u9023\u63a5\u6027\r\n   \u2514\u2500 ping \u4f3a\u670d\u5668\r\n      \u251c\u2500 \u6210\u529f \u2192 \u6aa2\u67e5SSH\u670d\u52d9\r\n      \u2514\u2500 \u5931\u6557 \u2192 \u6aa2\u67e5\u7db2\u8def\/\u9632\u706b\u7246\r\n\r\n2. SSH\u670d\u52d9\r\n   \u2514\u2500 nc -zv \u4f3a\u670d\u5668 22\r\n      \u251c\u2500 \u6210\u529f \u2192 \u6aa2\u67e5\u8a8d\u8b49\r\n      \u2514\u2500 \u5931\u6557 \u2192 \u6aa2\u67e5\u4f3a\u670d\u5668\u914d\u7f6e\r\n\r\n3. \u8a8d\u8b49\r\n   \u2514\u2500 ssh -v user@server\r\n      \u251c\u2500 \u91d1\u9470\u554f\u984c \u2192 \u9a57\u8b49\u6b0a\u9650\r\n      \u2514\u2500 \u5bc6\u78bc\u554f\u984c \u2192 \u6aa2\u67e5\u5e33\u6236\u72c0\u614b<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u5e38\u898b\u932f\u8aa4\u4ee3\u78bc\u548c\u89e3\u6c7a\u65b9\u6848<\/strong><\/h2>\n
\u53c3\u8003\u9019\u500b\u5feb\u901f\u67e5\u627e\u8868\u4e86\u89e3\u5e38\u898bSSH\u932f\u8aa4\uff1a<\/p>\n
\u932f\u8aa4\u4ee3\u78bc          | \u53ef\u80fd\u539f\u56e0           | \u5feb\u901f\u89e3\u6c7a\u65b9\u6848\r\n------------------|-------------------|------------------\r\nConnection timed  | \u9632\u706b\u7246\/\u7db2\u8def       | \u6aa2\u67e5iptables\r\nout              | \u963b\u64cb              | \u898f\u5247\r\n                 |                   |\r\nPermission       | \u932f\u8aa4\u7684\u91d1\u9470        | chmod 600 \r\ndenied           | \u6b0a\u9650              | ~\/.ssh\/id_rsa\r\n                 |                   |\r\nHost key         | \u4f3a\u670d\u5668            | ssh-keygen -R\r\nverification     | \u91cd\u65b0\u5b89\u88dd          | hostname\r\nfailed           |                   |\r\n-----------------|-------------------|---------------<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u672a\u96e8\u7da2\u7e46\u7684SSH\u8a2d\u5b9a<\/strong><\/h2>\n
\u5be6\u65bd\u9019\u4e9b\u9032\u968e\u914d\u7f6e\uff0c\u6253\u9020\u66f4\u5177\u5f48\u6027\u7684SSH\u8a2d\u5b9a\uff1a<\/p>\n
# \u5efa\u7acbSSH\u914d\u7f6e\u7bc4\u672c\r\ncat > ~\/.ssh\/config.template << 'EOL'\r\nHost hk-*\r\n    HostName %h.example.com\r\n    User admin\r\n    Port 22\r\n    IdentityFile ~\/.ssh\/%h\/id_ed25519\r\n    ConnectTimeout 10\r\n    ServerAliveInterval 60\r\nEOL<\/code><\/pre>\n
[\/vc_column_text][\/vc_column][\/vc_row][vc_row el_class=”blog-detail-section”][vc_column][vc_column_text css=””]<\/p>\n
\u7e3d\u7d50\u548c\u6700\u4f73\u5be6\u8e10<\/strong><\/h2>\n
\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u4e2d\u7684SSH\u9023\u7dda\u554f\u984c\u53ef\u4ee5\u901a\u904e\u9069\u7576\u7684\u8a3a\u65b7\u7a0b\u5e8f\u548c\u914d\u7f6e\u6700\u4f73\u5316\u4f86\u7cfb\u7d71\u5730\u89e3\u6c7a\u3002\u8acb\u8a18\u4f4f\u4ee5\u4e0b\u95dc\u9375\u9ede\uff1a<\/p>\n
\n
\u59cb\u7d42\u4fdd\u6301\u5099\u7528\u5b58\u53d6\u65b9\u6cd5<\/li>\n
\u8a18\u9304\u4f60\u7684\u4f3a\u670d\u5668\u914d\u7f6e<\/li>\n
\u5b9a\u671f\u66f4\u65b0SSH\u91d1\u9470\u5c0d<\/li>\n
\u76e3\u63a7\u9023\u7dda\u6a21\u5f0f<\/li>\n<\/ul>\n
\u5c0d\u65bc\u95dc\u9375\u7684\u6b63\u5f0f\u74b0\u5883\uff0c\u8acb\u8003\u616e\u5be6\u65bd\u4ee5\u4e0b\u9032\u968e\u5b89\u5168\u63aa\u65bd\uff1a<\/p>\n
# \u65b0\u589e\u5230 \/etc\/ssh\/sshd_config\r\nLoginGraceTime 30\r\nMaxStartups 10:30:60\r\nMaxSessions 10\r\nTCPKeepAlive yes\r\nAllowUsers admin deploy backup<\/code><\/pre>\n
\u8acb\u8a18\u4f4f\uff0cSSH\u9023\u7dda\u5c0d\u65bc\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u7ba1\u7406\u81f3\u95dc\u91cd\u8981\u3002\u901a\u904e\u9075\u5faa\u9019\u4e9b\u6280\u8853\u6307\u5357\u4e26\u7dad\u8b77\u9069\u7576\u7684\u5b89\u5168\u5354\u5b9a\uff0c\u4f60\u53ef\u4ee5\u78ba\u4fdd\u53ef\u9760\u548c\u5b89\u5168\u7684\u4f3a\u670d\u5668\u5b58\u53d6\u3002\u4fdd\u6301\u914d\u7f6e\u66f4\u65b0\uff0c\u4e26\u5b9a\u671f\u6e2c\u8a66\u4f60\u7684\u5099\u7528\u5b58\u53d6\u65b9\u6cd5\uff0c\u4ee5\u9632\u6b62\u88ab\u9396\u5b9a\u7684\u60c5\u6cc1\u767c\u751f\u3002<\/p>\n
[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"
[vc_row el_class=”blog-detail-section”][vc_ […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":2,"featured_media":18074,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[61],"tags":[4358,4359,4360,4361,259],"class_list":["post-18080","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-tc","tag-ssh-connection-issues-tc","tag-ssh-troubleshooting-tc","tag-server-connectivity-tc","tag-ssh-authentication-tc","tag-259"],"acf":[],"yoast_head":"\n