I have created a web service running on protected server(Centos, 123.123.123.123:8192
), we can only login to the web server via SSH from a jump server (say 111.111.111.111
). I can login the web server via SSH (first login to jump server, then dump to web server). Now I want to make a HTTP request to web server, How do setup the SSH tunnel to make it worker? Or if current limitation impossible, what is most secure way to open a door to make it possible?
Other limitations:
- the web server can only access to database, other out data are disabled (no
yum
, noping
, e.t.,) - the jump server's SSH server listen on redefined port, say 32220.
- the user name of web server (
ws
) and jump server (js
) are different.