jsch-extension as an extension of the JSch library providing:
- A session factory for creating multiple sessions from the same configuration
- A proxy mechanism for the ssh connections allowing multi-hop tunneling
- A simplified command execution interface
- A simplified sftp interface
- A simplified scp interface
- Tunneling with simplified configuration and management
A session factory is basically a container for configuration paired with a simple factory for creating com.jcraft.jsch.Session objects. It is the core abstraction of the jsch-extension library. The DefaultSessionFactory class is a default implementation providing useful configuration options. For example:
DefaultSessionFactory defaultSessionFactory = new DefaultSessionFactory(
username, hostname, port );
try {
defaultSessionFactory.setKnownHosts( knownHosts );
defaultSessionFactory.setIdentityFromPrivateKey( privateKey );
}
catch ( JSchException e ) {
Assume.assumeNoException( e );
}
...
// new session using all defaults
Session session = defaultSessionFactory.newSession();
// new session with override for username
Session session2 = defaultSessionFactory.newSessionFactoryBuilder()
.setUsername( "otheruser")
.build()
.newSession();The proxy allows for multi-hop ssh connections. In other words, if you have a bastion host type setup, you can tunnel thusly:
SessionFactory proxySessionFactory = sessionFactory
.newSessionFactoryBuilder()
.setHostname( "foo" )
.setPort( SessionFactory.SSH_PORT )
.build();
SessionFactory destinationSessionFactory = sessionFactory
.newSessionFactoryBuilder()
.setProxy( new SshProxy( proxySessionFactory ) )
.build();
Session session = destinationSessionFactory.newSession();Which would ensure any connections to any session created by destinationSessionFactory would be tunneled through host foo.
The simplified command execution is provided by the CommandRunner. It makes execution of commands on remote systems as simple as:
CommandRunner commandRunner = new CommandRunner( sessionFactory );
ExecuteResult result = commandRunner.execute( "ls -al" );
String filesInCurrentDirectory = result.getStdout();The simplified sftp is provided by the SftpRunner. This allows direct access to sftp commands like this:
SftpATTRS stat = null;
new SftpRunner( sessionFactory).execute( new Sftp() {
@Override
public void run( ChannelSftp sftp ) throws IOException {
try {
stat = sftp.lstat( path );
}
catch ( SftpException e ) {
}
} );The simplified scp is provided by the ScpFile class. It allows you to copy to/from any file using:
File toFile = new File( dir, toFilename );
try {
ScpFile to = new ScpFile( sessionFactory,
"path", "to", "remote", "file" );
to.copyFrom( new File( "/path/to/local/file" );
}
catch ( Exception e ) {
}Tunneling is provided by the classes in the com.pastdev.jsch.tunnel package. There is support for plain tunneling as well as a convenient wrapper for javax.sql.DataSource objects.
Opening a tunnel (equivalent to ssh port forwarding -L foo:1234:bar:1234) is as simple as:
TunnelConnection tunnelConnection = new TunnelConnection(
sessionFactory,
new Tunnel( "foo", 1234, "bar", 1234 ) );
tunnelConnection.open();Plain tunneling also offers dynamic local port allocation. Just supply 0 as the local port:
TunnelConnection tunnelConnection = new TunnelConnection(
sessionFactory,
new Tunnel( 0, "bar", 1234 ) );
tunnelConnection.open();
int assignedPort = tunnelConnection.getTunnel( "bar", 1234 )
.getAssignedPort();It is often necessary to tunnel multiple ports at the same time. Perhaps you have a web server that you need access to both over http and remote desktop:
TunnelConnectionManager manager = new TunnelConnectionManager(
sessionFactory,
"127.0.0.2:80:webserver:80",
"127.0.0.2:13389:webserver:13389" );
manager.open();Sometimes it is necessary to go through multiple servers along the way to your destination. This can be accomplished using a simplified path and spec syntax:
TunnelConnectionManager manager = new TunnelConnectionManager(
sessionFactory,
"me@bastion.host->webuser@webserver.gateway|127.0.0.2:80:webserver:80",
"me@bastion.host->webadmin@webserver.gateway|127.0.0.2:13389:webserver:13389" );
manager.open();This will tunnel through the bastion host as me and, tunnel through the webserver gateway as different users depending on what is being tunneled to. The local ports will then be forwarded from the webserver gateway to the webserver as specified.
The datasource wrapper comes in really handy when your database is locked down behind a firewall with no external connections allowed. Instead you can use an ssh connection the the server and tunnel your database connection through it making it appear as if the connection is local:
TunneledDataSourceWrapper wrapper = new TunneledDataSourceWrapper(
new TunnelConnectionManager(
sessionFactory,
pathAndSpecList ),
dataSource );This wrapper is used exactly like any other DataSource and it will manage its own ssh tunnel opening and closing as necessary.