原生 ssh 增加 socks 代理功能

server/term/ssh.go

@@ -2,6 +2,8 @@ package term
 
 import (
 	"fmt"
+	"golang.org/x/net/proxy"
+	"net"
 	"time"
 
 	"golang.org/x/crypto/ssh"
@@ -49,29 +51,73 @@ func NewSshClient(ip string, port int, username, password, privateKey, passphras
 	}
 
 	addr := fmt.Sprintf("%s:%d", ip, port)
-	//
-	//socks5, err := proxy.SOCKS5("tcp", "",
-	//	&proxy.Auth{User: "username", Password: "password"},
-	//	&net.Dialer{
-	//		Timeout:   30 * time.Second,
-	//		KeepAlive: 30 * time.Second,
-	//	},
-	//)
-	//if err != nil {
-	//	return nil, err
-	//}
-	//
-	//conn, err := socks5.Dial("tcp", addr)
-	//if err != nil {
-	//	return nil, err
-	//}
-	//
-	//clientConn, channels, requests, err := ssh.NewClientConn(conn, addr, config)
-	//if err != nil {
-	//	return nil, err
-	//}
-	//
-	//ssh.NewClient(clientConn, channels, requests)
-
 	return ssh.Dial("tcp", addr, config)
 }
+
+func NewSshClientUseSocks(ip string, port int, username, password, privateKey, passphrase string, socksProxyHost, socksProxyPort, socksProxyUsername, socksProxyPassword string) (*ssh.Client, error) {
+	var authMethod ssh.AuthMethod
+	if username == "-" || username == "" {
+		username = "root"
+	}
+	if password == "-" {
+		password = ""
+	}
+	if privateKey == "-" {
+		privateKey = ""
+	}
+	if passphrase == "-" {
+		passphrase = ""
+	}
+
+	var err error
+	if privateKey != "" {
+		var key ssh.Signer
+		if len(passphrase) > 0 {
+			key, err = ssh.ParsePrivateKeyWithPassphrase([]byte(privateKey), []byte(passphrase))
+			if err != nil {
+				return nil, err
+			}
+		} else {
+			key, err = ssh.ParsePrivateKey([]byte(privateKey))
+			if err != nil {
+				return nil, err
+			}
+		}
+		authMethod = ssh.PublicKeys(key)
+	} else {
+		authMethod = ssh.Password(password)
+	}
+
+	config := &ssh.ClientConfig{
+		Timeout:         3 * time.Second,
+		User:            username,
+		Auth:            []ssh.AuthMethod{authMethod},
+		HostKeyCallback: ssh.InsecureIgnoreHostKey(),
+	}
+
+	socksProxyAddr := fmt.Sprintf("%s:%s", socksProxyHost, socksProxyPort)
+
+	socks5, err := proxy.SOCKS5("tcp", socksProxyAddr,
+		&proxy.Auth{User: socksProxyUsername, Password: socksProxyPassword},
+		&net.Dialer{
+			Timeout:   30 * time.Second,
+			KeepAlive: 30 * time.Second,
+		},
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	addr := fmt.Sprintf("%s:%d", ip, port)
+	conn, err := socks5.Dial("tcp", addr)
+	if err != nil {
+		return nil, err
+	}
+
+	clientConn, channels, requests, err := ssh.NewClientConn(conn, addr, config)
+	if err != nil {
+		return nil, err
+	}
+
+	return ssh.NewClient(clientConn, channels, requests), nil
+}