Questions tagged [bastion]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
22 views

How to check Bastion login logs in Azure to VM

We share a domain admin account credential for one of our Active Directory VM stored in Azure. Users will connect to the VM via Bastion in Azure. Currently someone disabled a user in the AD and we ...
0
votes
0answers
27 views

How to properly make an ssh bastion, with fail2ban, in a Docker container

I've already asked the question on the Docker forums but so far no luck with a reply. I'm hoping I will have better fortune here. I’m in the process of making an ssh bastion (with fail2ban for ...
0
votes
0answers
22 views

Can't port forward from Windows client to RDS Sql Server instance via bastion

I am on a Windows 10 Pro machine and trying to connect to an RDS SQL Server instance by port forwarding through a bastion EC2 instance. I am using the OpenSSH client on my Windows machine. The SSH ...
0
votes
1answer
77 views

AWS Session Manager SSH MFA

I know that it's possible to enable SSH access with AWS Session Manager and use MFA with Bastion. My question is, can I combine the two? I want to ssh into an EC2 instance proxying through Session ...
0
votes
0answers
19 views

Have ssh use the local users name when connecting to jumphost

I want to provide a long list of EC2 instances to a large group of users. The idea is to share the ssh_config via a git repo. The config will contain entries like these: Host server_1_of_hundreds ...
1
vote
1answer
90 views

Ansible on EC2 with bastionhost and private key authentication and Active Directory validation

In our setup we have to access EC2 instances via a bastionhost. This bastionhost is connected to an Active Directory where it validates the credentials of the user who connects. From the bastion host ...
0
votes
0answers
90 views

How to connect MongoDB via Compass is bastion host(jump) setup Ask

I am using a bastion host(jump server) to connect to MongoDB. I can use it via command line but I am looking to connect via Compass client. My scenario is I have an ec2-A(public) instance which uses ...
1
vote
1answer
216 views

SSH CA-signed key fails via bastion

I'm setting up some servers for a new system and decided to do things a little bit differently. I'm running into an issue that I just can't seem to get past though. My desired configuration is having ...
0
votes
0answers
57 views

SSH-Config - expanding hostname in User

I'm trying to improve my ssh-config in order to connect to a specific non-standard application. My infrastructure is built behind a bastion. This specific black-box bastion works by getting the ...
0
votes
0answers
2k views

Could not resolve hostname nodename nor servname provided, or not known only with rsync

I work with sensitive data, so my host requires that I use a bastion to access the server. I can connect to the server without any problem in SSH using the following command: ssh userremotemachine@...
0
votes
0answers
43 views

Connect to RDS db through an OpsWorks jump host

I have an RDS db in a VPC (not publicly accessible), which is only accessible through a bastion that run in that same vpc. That bastion is in turn only accessible through an OpsWorks main bastion. Is ...
0
votes
1answer
215 views

Allowing external access to bastion hosts on aws

I am trying to create a few bastion hosts in my VPC on aws to connect to my databases that are located in a private subnet. I am using this aws Quick start. I understand the basics of CIDR blocks ...
2
votes
3answers
155 views

AWS - Bastion checking IAM permissions?

Is it possible to set up a bastion host in AWS that would be checking IAM to check if given user can connect to specific EC2 instance? It might be a bit blurry but the idea is following. Let's ...
0
votes
1answer
41 views

Is connection to Bastion Server Open to Anyone

My team uses a Bastion Server as a tunnel server to secure our AWS EC2 instances. The connection to Bastion was configured based on this article. To the best of my understanding, the Bastion server ...
1
vote
1answer
449 views

GCP: Run kubectl exec on private cluster over proxy

I have a private kubernetes cluster with private ip. In order to access it i have set up a bastion host with squid proxy. It looks like this: My host -> bastion -> private cloud Regular ...
0
votes
2answers
2k views

SSH through bastion host gives: open failed: connect failed: Connection timed out

We have bastion server B. We need to SSH from A through B to C, using private key (we use keepass with keeAgent). In the bastion I have: AllowTcpForwarding yes. I tried to use proxyCammand: Host ...
10
votes
3answers
3k views

Bastion server: use TCP forwarding VS placing private key on server

We have bastion server B. We need to SSH from A through B to C, using private key. What is the better option: Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
2
votes
0answers
2k views

PuTTY configuration with plink for keyboard-interactive authentication

Please see EDIT #2 for latest findings I've looked at other similar questions but, unfortunately, none of them seemed to help. This one is the closest and my symptoms are similar. Here's the issue: ...
2
votes
0answers
131 views

Reaching any server on a separate network with proxy+ssh

I have server A sitting in network A. Server A is able to connect to a bastion host in network B via ssh. This bastion host is able to reach any port on any server in network B. From any server in ...
0
votes
1answer
1k views

How to use socket file to access server if SSH Agent forwarding is enabled

I have bastion host. I connect to the bastion host using username/password. And I have private key for destination Server. Flow: Local Machine -> Bastion -> Destination I know that It's ...
0
votes
1answer
3k views

Setting up SSH jump box for Ansible - can't connect

I'm trying to use Ansible to deploy to an AWS host that does not have a public IP address. I'm able to reach the host manually by ssh onto a jump box, and on that box ssh onto the private machine ...
0
votes
1answer
370 views

Securely sharing SSH access in a team with SSH bastion

I need to share SSH access to a number of servers with my teammates and looking for a secure way to do it. I came up with a configuration involving a SSH bastion server, but not sure how (and if) it ...
0
votes
2answers
4k views

Eroor: $ ssh: Could not resolve hostname [HOSTNAME]: Name or service not known

I am on windows 10 machine. I need to ssh to our Bastion and then do port forwarding to connect to AWS instance. I have a config file that I use to ssh. My config file is as following: Host [host] ...
3
votes
1answer
4k views

SSH Tunnel through bastion host

I'm having an issue with establishing an ssh tunnel through a bastion host. Having looked through various SE questions which potentially solve the problem, nothing has. My ssh config file (local) ...
1
vote
2answers
4k views

Can we use Linux Bastion Server to connect to Windows instance in AWS private subnet?

I have a windows local desktop and putty installed on it. Now I want to know - In AWS setup whether we can use Linux Bastion host to connect to Windows Ec2 instances in private subnet by using agent ...
0
votes
1answer
147 views

Restrict ssh users remote IP via LDAP record

Our setup: LDAP server - OpenLDAP with openssh and sudo schemas. Bastion server - accepts SSH from anywhere and authenticates users via public keys stored in LDAP (using sssd) Destination server[s] - ...
5
votes
3answers
5k views

SSH host key checking cannot disable when using proxy jump

I am trying to SSH through a jumpbox, but SSH seems to be intent on checking host keys for the jumpbox, even though I'm telling it not to, using the normal -o StrictHostKeyChecking=no -o ...
0
votes
0answers
91 views

Bastion Server + EC2 Instances

I would to protect my VPC using a bastion. So I add to the bastion only the public keys. But I have some EC2 instances inside my VPC. Do I need to add the public both to bastion and EC2 instances?
7
votes
3answers
5k views

SSH through intermediate host fails only on myuser@mymac but works elsewhere

I am not able to connect via ssh to one of my datacenter nodes using my user on my macbook. This is a recent problem, and it was perfectly funtional since ~ a couple of weeks ago. Strangely, this ...
-1
votes
2answers
563 views

how to access host behind a bastion?

I have bunch of hosts that can be accessed only from bastion hosts ( A linux server where I can ssh into and access my real host ). Iam able to access it using firefox with socks proxy, now How can I ...
5
votes
2answers
3k views

ssh-keyscan through a bastion

I have some test servers running behind a bastion on Openstack. The test stack gets deleted and created often. After the stack is created I run a set of Ansible scripts to install and configure the ...
2
votes
1answer
178 views

Using bastionssh with config file

I am attempting to use bastionssh to access a number of other servers. My point of contact is a colleague who is based on the other side of the world so getting information can be tricky. He provided ...
1
vote
1answer
2k views

Connect to RabbitMQ (Amqp) via ssh gateway

I have the following situation: DevMachine (D) need to connect to a gateway/bastion server (G) and then be able to talk to another server serving RabbitMQ (R) traffic on port 5672. I tried using an ...
9
votes
1answer
884 views

Ansible - Access through Bastion w/ MFA

In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled. I've managed to get Ansible to successfully talk to servers through the bastion, ...
14
votes
1answer
8k views

Relationship between bastion host and jump host

What's are the differences/similarities between a "bastion host" and a "jump host"? Are they usually used interchangeably?
0
votes
1answer
159 views

Automatically forwarding from Bastion to next server?

We at work use Bastion in our VPC to connect to several private servers, I have set up aliases (ssh host aliases) to speed up the process of bouncing to the next server, but this is a slow process and ...
2
votes
0answers
779 views

How to know if a bastion or vpn is the right solution? [closed]

How do you choose between using a bastion or VPN when providing access to a vlan? I have seen many different setups, but don't have a good idea on how to make a less subjective selection. Is there a ...
1
vote
2answers
2k views

Restricting per-user outgoing SSH

I have a server which I administer. It has port 22 access to many machines. I want to use it as a bastion host for some users. The catch is that I want each user on my server to have its own whitelist ...
1
vote
2answers
1k views

Should a NAT host be separate from a Bastion host

Have a private network with servers that required SSH access. Since the instances are in a private subnet, they cannot be accessed directly via SSH and require a public Bastion host to access. ...