Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [bastion]

55 questions
2
votes
0 answers

Reaching any server on a separate network with proxy+ssh

I have server A sitting in network A. Server A is able to connect to a bastion host in network B via ssh. This bastion host is able to reach any port on any server in network B. From any server in network A, I would like to be able to do something…
cat pants
  • 2,273
  • 10
  • 35
  • 46
2
votes
2 answers

Securely sharing SSH access in a team with SSH bastion

I need to share SSH access to a number of servers with my teammates and looking for a secure way to do it. I came up with a configuration involving a SSH bastion server, but not sure how (and if) it could be done. I want to have only one SSH key…
ivangretsky
  • 141
  • 2
2
votes
2 answers

Can we use Linux Bastion Server to connect to Windows instance in AWS private subnet?

I have a windows local desktop and putty installed on it. Now I want to know - In AWS setup whether we can use Linux Bastion host to connect to Windows Ec2 instances in private subnet by using agent forwarding ?
Dave
  • 41
  • 1
  • 3
2
votes
1 answer

Using bastionssh with config file

I am attempting to use bastionssh to access a number of other servers. My point of contact is a colleague who is based on the other side of the world so getting information can be tricky. He provided me with access for the bastionssh server and…
EamonnMcElroy
  • 123
  • 2
2
votes
1 answer

Connect to RabbitMQ (Amqp) via ssh gateway

I have the following situation: DevMachine (D) need to connect to a gateway/bastion server (G) and then be able to talk to another server serving RabbitMQ (R) traffic on port 5672. I tried using an ssh tunnel to the gateway: ssh -L…
Urjit
  • 163
  • 1
  • 5
2
votes
0 answers

How to know if a bastion or vpn is the right solution?

How do you choose between using a bastion or VPN when providing access to a vlan? I have seen many different setups, but don't have a good idea on how to make a less subjective selection. Is there a known list to help select? I know there are…
Ronald Petty
  • 21
  • 3
2
votes
1 answer

How to connect azure postgres with bastion?

In this page also, it was shown to create a separate vm in the same vnet to connect to postgres setup in a private vnet option selected. Is there anyway to connect using azure bastion.please show the steps.
user2331760
  • 155
  • 4
  • 12
2
votes
1 answer

How do you SSH in to an Azure VM through an Azure Bastion?

My initial understanding was that an Azure Bastion acts like a lightweight SSH (and RDP) gateway to resources -- specifically, VMs -- on the same virtual network, rather than provisioning a full VM as a jumpbox. That is, I would expect to be able to…
Xophmeister
  • 147
  • 7
1
vote
1 answer

Ansible on EC2 with bastionhost and private key authentication and Active Directory validation

In our setup we have to access EC2 instances via a bastionhost. This bastionhost is connected to an Active Directory where it validates the credentials of the user who connects. From the bastion host the connection is being made with an ssh key…
Marged
  • 213
  • 1
  • 2
  • 10
1
vote
2 answers

Eroor: $ ssh: Could not resolve hostname [HOSTNAME]: Name or service not known

I am on windows 10 machine. I need to ssh to our Bastion and then do port forwarding to connect to AWS instance. I have a config file that I use to ssh. My config file is as following: Host [host] IdentityFile myprivatekey CheckHostIP no …
Salah
  • 41
  • 1
  • 5
1
vote
2 answers

Restricting per-user outgoing SSH

I have a server which I administer. It has port 22 access to many machines. I want to use it as a bastion host for some users. The catch is that I want each user on my server to have its own whitelist of IPs/addresses that it can SSH to. For…
Sankalp
  • 113
  • 4
1
vote
1 answer

How do I ensure that a SOCK5-proxy is not used by malicious applications?

I have created a jumphost/bastion, that will act just as that - a jumphost to certain hosts:ports. I am aware of that I can limit users/groups with the following: Match User Alice PermitOpen some.host.tld:80 another.host.tld:22…
Orphans
  • 1,396
  • 2
  • 18
  • 30
1
vote
0 answers

pssh with ssh ProxyJump with multiplexing session re-use

I have a list of nodes, that are accessible only through a bastion server. On these nodes, I would like to execute commands in parallel. So, I had been trying to use ssh -J flag or, respectively, the ssh_config ProxyJump option in combination with…
THX
  • 243
  • 2
  • 10
1
vote
1 answer

X11 forwarding through a jump box

I have a machine that is configured to auto connect to a jump/bastion box when there is an internet connection. I configured its ssh config file as follows: Host tunnel HostName IdentityFile …
inzel
  • 11
  • 2
1
vote
2 answers

Can Azure Bastion Host be configured for unattended ssh logins?

Can bastion hosts be setup for unattended ssh logins? I've not been able to find anything in the documentation. All I see is that a user goes to the Azure portal and connects through the portual UI over 443. Nothing to indicate that public SSH(22)…
capdragon
  • 174
  • 1
  • 11
1
2
3 4