Proxyjump on Joonlog

Proxyjump on Joonloghttps://joonlog.github.io/tags/proxyjump/Recent content in Proxyjump on JoonlogHugo -- gohugo.ioko-krFri, 01 May 2026 09:00:00 +0900SSH Config 옵션 정리https://joonlog.github.io/p/ssh-config-%EC%98%B5%EC%85%98-%EC%A0%95%EB%A6%AC/Fri, 01 May 2026 09:00:00 +0900https://joonlog.github.io/p/ssh-config-%EC%98%B5%EC%85%98-%EC%A0%95%EB%A6%AC/<blockquote> <p><code>~/.ssh/config</code> SSH 접속 편의성</p> </blockquote> <p>매번 <code>ssh -i key user@host -p port</code> 처럼 옵션을 직접 입력하는 대신, <code>~/.ssh/config</code>에 설정을 저장해두면 <code>ssh <Host명></code> 만으로 접속 가능하다.</p> <ul> <li>Windows: <code>C:\\Users\\<계정명>\\.ssh\\config</code></li> <li>Linux/Mac: <code>~/.ssh/config</code></li> </ul> <h2 id="1-기본-구조">1. 기본 구조 </h2><div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">Host <별칭> </span></span><span class="line"><span class="cl"> 옵션 값 </span></span></code></pre></td></tr></table> </div> </div><ul> <li><code>Host</code>에 지정한 별칭으로 <code>ssh <별칭></code> 접속</li> <li>와일드카드 사용 가능 (<code>Host *</code>, <code>Host node*</code>)</li> </ul> <h2 id="2-주요-옵션">2. 주요 옵션 </h2><h3 id="hostname">HostName </h3><ul> <li>실제 접속 대상 주소 (IP 또는 도메인)</li> <li><code>Host</code>에 별칭을 쓰고 실제 주소는 여기에 기입</li> </ul> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">Host mgt </span></span><span class="line"><span class="cl"> HostName ssh-mgt.joonlog.store </span></span></code></pre></td></tr></table> </div> </div><h3 id="user">User </h3><ul> <li>접속할 계정명</li> <li>설정하지 않으면 현재 로컬 계정으로 접속 시도</li> </ul> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl"> User root </span></span></code></pre></td></tr></table> </div> </div><h3 id="identityfile">IdentityFile </h3><ul> <li>사용할 개인키 파일 경로</li> <li>설정하지 않으면 <code>~/.ssh/id_rsa</code> 등 기본 키 파일을 순서대로 시도</li> </ul> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl"> IdentityFile ~/.ssh/pve </span></span></code></pre></td></tr></table> </div> </div><h3 id="port">Port </h3><ul> <li>접속할 SSH 포트</li> <li>기본값은 22이며 커스텀 포트 사용 시 지정</li> </ul> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl"> Port 2222 </span></span></code></pre></td></tr></table> </div> </div><h3 id="serveraliveinterval--serveralivecountmax">ServerAliveInterval / ServerAliveCountMax </h3><ul> <li>연결 유지 설정</li> <li><code>ServerAliveInterval</code>: 지정한 초마다 서버에 alive 패킷 전송</li> <li><code>ServerAliveCountMax</code>: 응답 없을 때 최대 재시도 횟수, 초과 시 연결 종료</li> <li>idle 상태에서 연결이 끊기는 것을 방지</li> </ul> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl"> ServerAliveInterval 60 </span></span><span class="line"><span class="cl"> ServerAliveCountMax 3 </span></span></code></pre></td></tr></table> </div> </div><h3 id="proxycommand">ProxyCommand </h3><ul> <li>SSH 연결 전에 실행할 명령어로 연결을 중계</li> <li>Cloudflare Tunnel SSH 접속 시 사용</li> </ul> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl"> ProxyCommand cloudflared access ssh --hostname %h </span></span></code></pre></td></tr></table> </div> </div><ul> <li><code>%h</code>는 <code>HostName</code> 값으로 자동 치환</li> </ul> <h3 id="proxyjump">ProxyJump </h3><ul> <li>점프 호스트를 거쳐서 접속할 때 사용</li> <li>VSCode Remote SSH나 내부망 서버 접속 시 유용</li> <li><code>ProxyJump <Host별칭></code> 형식으로 이미 config에 정의된 Host 재사용 가능</li> </ul> <div class="highlight"><div class="chroma"> <table class="lntable"><tr><td class="lntd"> <pre tabindex="0" class="chroma"><code><span class="lnt">1 </span><span class="lnt">2 </span><span class="lnt">3 </span><span class="lnt">4 </span><span class="lnt">5 </span></code></pre></td> <td class="lntd"> <pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">Host node1 </span></span><span class="line"><span class="cl"> HostName <IP> </span></span><span class="line"><span class="cl"> User root </span></span><span class="line"><span class="cl"> IdentityFile ~/.ssh/pve </span></span><span class="line"><span class="cl"> ProxyJump mgt </span></span></code></pre></td></tr></table> </div> </div><ul> <li>위 설정 시 <code>ssh node1</code> 하면 mgt를 경유해서 node1에 접속</li> </ul>