Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [bastion]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
80 views

How to ssh to a server via bastion(proxy) with key from the bastion(proxy) NOT origin

So I'm essentially trying to do this: ssh bob2@35.192.152.35 -t ssh bob2@test-vm the above works fine if I just put it into the terminal, however I am having a hard time trying to replicate it via ...
user avatar
1 vote
0 answers
31 views

pssh with ssh ProxyJump with multiplexing session re-use

I have a list of nodes, that are accessible only through a bastion server. On these nodes, I would like to execute commands in parallel. So, I had been trying to use ssh -J flag or, respectively, the ...
user avatar
  • 203
0 votes
0 answers
28 views

How to connect azure postgres with bastion?

In this page also, it was shown to create a separate vm in the same vnet to connect to postgres setup in a private vnet option selected. Is there anyway to connect using azure bastion.please show the ...
user avatar
0 votes
0 answers
79 views

Use Nginx for audit logs

I have a sensitive webapp used only internally. I want to log all the actions of my users for 90 days. To achieve that, I'm using a nginx reverse proxy that forwards all the requests to the webapp. I ...
user avatar
  • 140
0 votes
1 answer
355 views

How do you SSH in to an Azure VM through an Azure Bastion?

My initial understanding was that an Azure Bastion acts like a lightweight SSH (and RDP) gateway to resources -- specifically, VMs -- on the same virtual network, rather than provisioning a full VM as ...
user avatar
0 votes
0 answers
34 views

Azure Bastion whitelist IPs

I have an Azure Bastion set up to demo the hub-and-spoke topology. I was able to recreate the Microsoft-provided azure-hub-spoke JSON example in Terraform successfully and all is working well. What I ...
user avatar
  • 141
0 votes
1 answer
66 views

Can a previously define Host be used as a Hostname in .ssh/config file for a tunnel configuration using LocalForward?

So, I have a bunch of servers that are only accessible thru a bastion host. My bastion host, however has a dynamic IP which change randomly. For ssh'ing into the various server, I simply have a .ssh/...
user avatar
1 vote
1 answer
210 views

X11 forwarding through a jump box

I have a machine that is configured to auto connect to a jump/bastion box when there is an internet connection. I configured its ssh config file as follows: Host tunnel HostName <jump ...
user avatar
  • 11
0 votes
0 answers
186 views

port forwarding through a bastion host

I want to port-forward to a server through bastion host. The way I connect to bastion is why my ssh key after I login to the company network. The connection from the bastion to the server, I want to ...
user avatar
  • 101
0 votes
1 answer
169 views

Cannot connect to bastion host in AWS

I am following the guide in https://aws-quickstart.s3.amazonaws.com/quickstart-bitnami-wordpress/doc/wordpress-high-availability-by-bitnami-on-the-aws-cloud.pdf to create a WordPress High Availability ...
user avatar
  • 171
0 votes
1 answer
19 views

Can Azure Bastion Host be configured for unattended ssh logins?

Can bastion hosts be setup for unattended ssh logins? I've not been able to find anything in the documentation. All I see is that a user goes to the Azure portal and connects through the portual UI ...
user avatar
  • 164
2 votes
1 answer
905 views

Tinyproxy error: Unable to connect to the server: Access denied

I installed tinyproxy 1.8.4 on a bastion host with public IP on GCP, to forward traffic to a private GKE cluster. Now I'm using ssh to connect to the bastion host with port forwarding and the ...
user avatar
0 votes
1 answer
294 views

Bastion host user access

I am using my bastion host to connect to internal servers as follows ssh -J user@BastionHost user@InternalServer Is it required to create user on Bastion host to jump to internal servers ? Or can we ...
user avatar
0 votes
1 answer
59 views

Deploying Bastion Host

I am trying to setup a bastion host for my online infrastructure. All my servers will be using public key for authentication. Currently I am able to connect to my bastion host using public key but I ...
user avatar
1 vote
0 answers
13 views

How can a TCP connection be passed through a routing server in AWS to its originator to avoid timeouts?

I'm a front end developer that has found myself needing to solve a backend issue with a site I'm working on. I did not set it up and am trying to understand how its currently structured. Within AWS ...
user avatar
  • 11
0 votes
1 answer
95 views

Explanation on Bastion Host

I've just setup my first bastion host in AWS and it made me think about the access. For an example: user --> bastion (public) --> database (will only allow access from bastion IP on port 22) It ...
user avatar
0 votes
1 answer
1k views

Run 'kubectl' commands from my localhost to GKE - but via tunnelling through a bastion host

Currently... I have a GKE/kubernetes/k8s cluster in GCP. I have a bastion host (Compute Engine VM Instance) in GCP. I have allowlisted my bastion host's IP in the GKE cluster's Master authorized ...
user avatar
  • 121
0 votes
1 answer
154 views

Getting Error while connecting public to private server on Oracle cloud

ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa opc@0.0.0.0 -W %h:%p %r' -i ~/.ssh/id_rsa opc@0.0.0.0 ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa opc@<publiIP> -W %h:%p %r' -i ~/.ssh/id_rsa opc@...
user avatar
  • 1
0 votes
1 answer
565 views

How to check Bastion login logs in Azure to VM

We share a domain admin account credential for one of our Active Directory VM stored in Azure. Users will connect to the VM via Bastion in Azure. Currently someone disabled a user in the AD and we ...
user avatar
3 votes
1 answer
749 views

How to properly make an ssh bastion, with fail2ban, in a Docker container

I've already asked the question on the Docker forums but so far no luck with a reply. I'm hoping I will have better fortune here. I’m in the process of making an ssh bastion (with fail2ban for ...
user avatar
0 votes
1 answer
356 views

AWS Session Manager SSH MFA

I know that it's possible to enable SSH access with AWS Session Manager and use MFA with Bastion. My question is, can I combine the two? I want to ssh into an EC2 instance proxying through Session ...
user avatar
  • 1
1 vote
1 answer
315 views

Ansible on EC2 with bastionhost and private key authentication and Active Directory validation

In our setup we have to access EC2 instances via a bastionhost. This bastionhost is connected to an Active Directory where it validates the credentials of the user who connects. From the bastion host ...
user avatar
  • 213
2 votes
1 answer
375 views

SSH CA-signed key fails via bastion

I'm setting up some servers for a new system and decided to do things a little bit differently. I'm running into an issue that I just can't seem to get past though. My desired configuration is having ...
user avatar
  • 71
0 votes
0 answers
3k views

Could not resolve hostname nodename nor servname provided, or not known only with rsync

I work with sensitive data, so my host requires that I use a bastion to access the server. I can connect to the server without any problem in SSH using the following command: ssh userremotemachine@...
user avatar
0 votes
1 answer
669 views

Allowing external access to bastion hosts on aws

I am trying to create a few bastion hosts in my VPC on aws to connect to my databases that are located in a private subnet. I am using this aws Quick start. I understand the basics of CIDR blocks ...
user avatar
  • 103
2 votes
3 answers
345 views

AWS - Bastion checking IAM permissions?

Is it possible to set up a bastion host in AWS that would be checking IAM to check if given user can connect to specific EC2 instance? It might be a bit blurry but the idea is following. Let's ...
user avatar
0 votes
1 answer
51 views

Is connection to Bastion Server Open to Anyone

My team uses a Bastion Server as a tunnel server to secure our AWS EC2 instances. The connection to Bastion was configured based on this article. To the best of my understanding, the Bastion server ...
user avatar
5 votes
1 answer
3k views

GCP: Run kubectl exec on private cluster over proxy

I have a private kubernetes cluster with private ip. In order to access it i have set up a bastion host with squid proxy. It looks like this: My host -> bastion -> private cloud Regular ...
user avatar
0 votes
2 answers
6k views

SSH through bastion host gives: open failed: connect failed: Connection timed out

We have bastion server B. We need to SSH from A through B to C, using private key (we use keepass with keeAgent). In the bastion I have: AllowTcpForwarding yes. I tried to use proxyCammand: Host ...
user avatar
11 votes
3 answers
5k views

Bastion server: use TCP forwarding VS placing private key on server

We have bastion server B. We need to SSH from A through B to C, using private key. What is the better option: Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
user avatar
2 votes
0 answers
3k views

PuTTY configuration with plink for keyboard-interactive authentication

Please see EDIT #2 for latest findings I've looked at other similar questions but, unfortunately, none of them seemed to help. This one is the closest and my symptoms are similar. Here's the issue: ...
user avatar
2 votes
0 answers
170 views

Reaching any server on a separate network with proxy+ssh

I have server A sitting in network A. Server A is able to connect to a bastion host in network B via ssh. This bastion host is able to reach any port on any server in network B. From any server in ...
user avatar
  • 2,099
0 votes
1 answer
2k views

How to use socket file to access server if SSH Agent forwarding is enabled

I have bastion host. I connect to the bastion host using username/password. And I have private key for destination Server. Flow: Local Machine -> Bastion -> Destination I know that It's ...
user avatar
  • 161
0 votes
1 answer
4k views

Setting up SSH jump box for Ansible - can't connect

I'm trying to use Ansible to deploy to an AWS host that does not have a public IP address. I'm able to reach the host manually by ssh onto a jump box, and on that box ssh onto the private machine ...
user avatar
  • 297
1 vote
2 answers
623 views

Securely sharing SSH access in a team with SSH bastion

I need to share SSH access to a number of servers with my teammates and looking for a secure way to do it. I came up with a configuration involving a SSH bastion server, but not sure how (and if) it ...
user avatar
0 votes
2 answers
7k views

Eroor: $ ssh: Could not resolve hostname [HOSTNAME]: Name or service not known

I am on windows 10 machine. I need to ssh to our Bastion and then do port forwarding to connect to AWS instance. I have a config file that I use to ssh. My config file is as following: Host [host] ...
user avatar
  • 21
3 votes
1 answer
5k views

SSH Tunnel through bastion host

I'm having an issue with establishing an ssh tunnel through a bastion host. Having looked through various SE questions which potentially solve the problem, nothing has. My ssh config file (local) ...
user avatar
  • 161
2 votes
2 answers
6k views

Can we use Linux Bastion Server to connect to Windows instance in AWS private subnet?

I have a windows local desktop and putty installed on it. Now I want to know - In AWS setup whether we can use Linux Bastion host to connect to Windows Ec2 instances in private subnet by using agent ...
user avatar
  • 41
0 votes
1 answer
250 views

Restrict ssh users remote IP via LDAP record

Our setup: LDAP server - OpenLDAP with openssh and sudo schemas. Bastion server - accepts SSH from anywhere and authenticates users via public keys stored in LDAP (using sssd) Destination server[s] - ...
user avatar
11 votes
3 answers
10k views

SSH host key checking cannot disable when using proxy jump

I am trying to SSH through a jumpbox, but SSH seems to be intent on checking host keys for the jumpbox, even though I'm telling it not to, using the normal -o StrictHostKeyChecking=no -o ...
user avatar
  • 519
0 votes
0 answers
94 views

Bastion Server + EC2 Instances

I would to protect my VPC using a bastion. So I add to the bastion only the public keys. But I have some EC2 instances inside my VPC. Do I need to add the public both to bastion and EC2 instances?
user avatar
11 votes
5 answers
12k views

SSH through intermediate host fails only on myuser@mymac but works elsewhere

I am not able to connect via ssh to one of my datacenter nodes using my user on my macbook. This is a recent problem, and it was perfectly funtional since ~ a couple of weeks ago. Strangely, this ...
user avatar
  • 332
-1 votes
2 answers
668 views

how to access host behind a bastion?

I have bunch of hosts that can be accessed only from bastion hosts ( A linux server where I can ssh into and access my real host ). Iam able to access it using firefox with socks proxy, now How can I ...
user avatar
  • 61
6 votes
2 answers
5k views

ssh-keyscan through a bastion

I have some test servers running behind a bastion on Openstack. The test stack gets deleted and created often. After the stack is created I run a set of Ansible scripts to install and configure the ...
user avatar
  • 113
2 votes
1 answer
205 views

Using bastionssh with config file

I am attempting to use bastionssh to access a number of other servers. My point of contact is a colleague who is based on the other side of the world so getting information can be tricky. He provided ...
user avatar
2 votes
1 answer
4k views

Connect to RabbitMQ (Amqp) via ssh gateway

I have the following situation: DevMachine (D) need to connect to a gateway/bastion server (G) and then be able to talk to another server serving RabbitMQ (R) traffic on port 5672. I tried using an ...
user avatar
  • 163
9 votes
1 answer
1k views

Ansible - Access through Bastion w/ MFA

In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled. I've managed to get Ansible to successfully talk to servers through the bastion, ...
user avatar
23 votes
2 answers
13k views

Relationship between bastion host and jump host

What's are the differences/similarities between a "bastion host" and a "jump host"? Are they usually used interchangeably?
user avatar
0 votes
1 answer
217 views

Automatically forwarding from Bastion to next server?

We at work use Bastion in our VPC to connect to several private servers, I have set up aliases (ssh host aliases) to speed up the process of bouncing to the next server, but this is a slow process and ...
user avatar
  • 577
2 votes
0 answers
826 views

How to know if a bastion or vpn is the right solution? [closed]

How do you choose between using a bastion or VPN when providing access to a vlan? I have seen many different setups, but don't have a good idea on how to make a less subjective selection. Is there a ...
user avatar