利用腾讯云主机+SSH远程端口转发实现内网穿透

ssh -R [bind_address:]port:host:hostport
 Specifies that connections to the given TCP port or Unix socket on the remote (server) host are to be forwarded to the given host
 and port, or Unix socket, on the local side.  This works by allocating a socket to listen to either a TCP port or to a Unix socket
 on the remote side.  Whenever a connection is made to this port or Unix socket, the connection is forwarded over the secure channel,
 and a connection is made to either host port hostport, or local_socket, from the local machine.
 Port forwardings can also be specified in the configuration file.  Privileged ports can be forwarded only when logging in as root on
 the remote machine.  IPv6 addresses can be specified by enclosing the address in square brackets.
 By default, TCP listening sockets on the server will be bound to the loopback interface only.  This may be overridden by specifying
 a bind_address.  An empty bind_address, or the address ndicates that the remote socket should listen on all interfaces.
 Specifying a remote bind_address will only succeed if the server's GatewayPorts option is enabled (see sshd_config(5)).
 If the port argument is he listen port will be dynamically allocated on the server and reported to the client at run time.
 When used together with -O forward the allocated port will be printed to the standard output.

ssh -N -f -R 8806:127.0.0.1:3306 root@119.45.157.198

netstat -anp | grep 8806

mysql -uroot -p -h 127.0.0.1 -P 8806

ssh -N -f -R 8122:127.0.0.1:22 root@119.45.157.198

ssh 127.0.0.1 -p 8122

vi /etc/ssh/sshd_config
将#GatewayPorts no改为GatewayPorts yes
systemctl restart sshd.service

GatewayPorts介绍
Specifies whether remote hosts are allowed to connect to ports forwarded for the client.  By default, sshd(8) binds remote port
forwardings to the loopback address.  This prevents other remote hosts from connecting to forwarded ports.  GatewayPorts can be
used to specify that sshd should allow remote port forwardings to bind to non-loopback addresses, thus allowing other hosts to
connect.  The argument may be no to force remote port forwardings to be available to the local host only, yes to force remote
port forwardings to bind to the wildcard address, or clientspecified to allow the client to select the address to which the
forwarding is bound.  The default is no.

ssh -N -f -R 8122:127.0.0.1:22 root@119.45.157.198