Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [bastion]

55 questions
0
votes
0 answers

Can I write a one-liner to kubectl exec -it into GKE pod via a bastion host using gcloud compute ssh?

We run our production Rails app on GKE, and we require all production access to go through a Bastion host. To access it, I SSH into the Bastion host: gcloud compute ssh --project=myproject --zone=myzone bastion-vm Once that connects, I get the name…
JakeRobb
  • 105
  • 6
0
votes
1 answer

Can't connect from bastion host to private instance

I have a bastion host that I'm trying to use to SSH to a private instance. The instances are in different AZs (with different subnets). The VPC has a CIDR of 10.0.0.0/16. The bastion host subnet has the following route table 10.0.0.0/16…
jordaniac89
  • 111
  • 1
0
votes
1 answer

Accessing Azure resources from an offsite location

I have an azure application that runs on PaaS architecture. To access azure resources like sql or add, I would like that to go through a secure virtual machine instead of from personal devices which is what happens today. The problem today is that…
learner
  • 101
  • 1
0
votes
1 answer

Can a previously define Host be used as a Hostname in .ssh/config file for a tunnel configuration using LocalForward?

So, I have a bunch of servers that are only accessible thru a bastion host. My bastion host, however has a dynamic IP which change randomly. For ssh'ing into the various server, I simply have a .ssh/config with a ProxyJump referencing the host of my…
cyberguard
  • 1
0
votes
1 answer

Cannot connect to bastion host in AWS

I am following the guide in https://aws-quickstart.s3.amazonaws.com/quickstart-bitnami-wordpress/doc/wordpress-high-availability-by-bitnami-on-the-aws-cloud.pdf to create a WordPress High Availability on AWS. The creation succeeds. And I can visit…
alancc
  • 141
  • 12
0
votes
1 answer

Bastion host user access

I am using my bastion host to connect to internal servers as follows ssh -J user@BastionHost user@InternalServer Is it required to create user on Bastion host to jump to internal servers ? Or can we just use this server to Jump to internal servers…
Joel Divekar
  • 53
  • 5
0
votes
1 answer

Deploying Bastion Host

I am trying to setup a bastion host for my online infrastructure. All my servers will be using public key for authentication. Currently I am able to connect to my bastion host using public key but I do not want to store private keys of my internal…
Joel Divekar
  • 53
  • 5
0
votes
1 answer

Explanation on Bastion Host

I've just setup my first bastion host in AWS and it made me think about the access. For an example: user --> bastion (public) --> database (will only allow access from bastion IP on port 22) It seems like I can do this in two ways: First User will…
Cekpome Woot
  • 3
  • 1
0
votes
2 answers

Run 'kubectl' commands from my localhost to GKE - but via tunnelling through a bastion host

Currently... I have a GKE/kubernetes/k8s cluster in GCP. I have a bastion host (Compute Engine VM Instance) in GCP. I have allowlisted my bastion host's IP in the GKE cluster's Master authorized networks section. Hence, in order to run kubectl…
Rakib
  • 121
  • 1
  • 9
0
votes
1 answer

Getting Error while connecting public to private server on Oracle cloud

ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa opc@0.0.0.0 -W %h:%p %r' -i ~/.ssh/id_rsa opc@0.0.0.0 ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa opc@ -W %h:%p %r' -i ~/.ssh/id_rsa opc@privateIP From the first command I am getting output 1…
Nick
  • 1
  • 1
1 2 3
4