Questions tagged [bastion]
The bastion tag has no usage guidance.
55
questions
0
votes
0
answers
34
views
Problems accessing to a RDS through a Bastion Host from a local K3s
I'm trying to build a local Kubernetes with K3s and I'm having problems to access to my RDD that is situated in the private Area of the VPN.
For now, I'm trying to deploy a Passbolt (https://...
- 1
0
votes
1
answer
64
views
Use bastions config file for server configuration
I'm in the process of setting up a jump server/bastion host for several of our developers and was wondering if it is possible to use the config file on the bastion for final server resolution.
E.g. we ...
- 101
1
vote
1
answer
231
views
How do I ensure that a SOCK5-proxy is not used by malicious applications?
I have created a jumphost/bastion, that will act just as that - a jumphost to certain hosts:ports.
I am aware of that I can limit users/groups with the following:
Match User Alice
PermitOpen some....
- 1,406
0
votes
0
answers
80
views
Can I write a one-liner to kubectl exec -it into GKE pod via a bastion host using gcloud compute ssh?
We run our production Rails app on GKE, and we require all production access to go through a Bastion host.
To access it, I SSH into the Bastion host:
gcloud compute ssh --project=myproject --zone=...
- 105
0
votes
1
answer
436
views
Can't connect from bastion host to private instance
I have a bastion host that I'm trying to use to SSH to a private instance. The instances are in different AZs (with different subnets). The VPC has a CIDR of 10.0.0.0/16. The bastion host subnet has ...
- 111
0
votes
1
answer
28
views
Accessing Azure resources from an offsite location
I have an azure application that runs on PaaS architecture. To access azure resources like sql or add, I would like that to go through a secure virtual machine instead of from personal devices which ...
- 101
4
votes
2
answers
2k
views
How to ssh to a server via bastion(proxy) with key from the bastion(proxy) NOT origin
So I'm essentially trying to do this:
ssh [email protected] -t ssh bob2@test-vm
the above works fine if I just put it into the terminal, however I am having a hard time trying to replicate it via ...
- 141
1
vote
0
answers
222
views
pssh with ssh ProxyJump with multiplexing session re-use
I have a list of nodes, that are accessible only through a bastion server.
On these nodes, I would like to execute commands in parallel. So, I had been trying to use ssh -J flag or, respectively, the ...
- 243
2
votes
1
answer
293
views
How to connect azure postgres with bastion?
In this page also, it was shown to create a separate vm in the same vnet to connect to postgres setup in a private vnet option selected.
Is there anyway to connect using azure bastion.please show the ...
- 155
2
votes
1
answer
2k
views
How do you SSH in to an Azure VM through an Azure Bastion?
My initial understanding was that an Azure Bastion acts like a lightweight SSH (and RDP) gateway to resources -- specifically, VMs -- on the same virtual network, rather than provisioning a full VM as ...
- 147
0
votes
1
answer
280
views
Can a previously define Host be used as a Hostname in .ssh/config file for a tunnel configuration using LocalForward?
So, I have a bunch of servers that are only accessible thru a bastion host.
My bastion host, however has a dynamic IP which change randomly.
For ssh'ing into the various server, I simply have a .ssh/...
1
vote
1
answer
995
views
X11 forwarding through a jump box
I have a machine that is configured to auto connect to a jump/bastion box when there is an internet connection. I configured its ssh config file as follows:
Host tunnel
HostName <jump ...
- 11
0
votes
1
answer
819
views
Cannot connect to bastion host in AWS
I am following the guide in https://aws-quickstart.s3.amazonaws.com/quickstart-bitnami-wordpress/doc/wordpress-high-availability-by-bitnami-on-the-aws-cloud.pdf to create a WordPress High Availability ...
- 153
1
vote
2
answers
123
views
Can Azure Bastion Host be configured for unattended ssh logins?
Can bastion hosts be setup for unattended ssh logins?
I've not been able to find anything in the documentation. All I see is that a user goes to the Azure portal and connects through the portual UI ...
- 174
3
votes
1
answer
3k
views
Tinyproxy error: Unable to connect to the server: Access denied
I installed tinyproxy 1.8.4 on a bastion host with public IP on GCP, to forward traffic to a private GKE cluster. Now I'm using ssh to connect to the bastion host with port forwarding and the ...
google-cloud-platform
0
votes
1
answer
515
views
Bastion host user access
I am using my bastion host to connect to internal servers as follows
ssh -J user@BastionHost user@InternalServer
Is it required to create user on Bastion host to jump to internal servers ? Or can we ...
- 53
0
votes
1
answer
110
views
Deploying Bastion Host
I am trying to setup a bastion host for my online infrastructure. All my servers will be using public key for authentication. Currently I am able to connect to my bastion host using public key but I ...
- 53
1
vote
0
answers
23
views
How can a TCP connection be passed through a routing server in AWS to its originator to avoid timeouts?
I'm a front end developer that has found myself needing to solve a backend issue with a site I'm working on. I did not set it up and am trying to understand how its currently structured. Within AWS ...
- 11
0
votes
1
answer
134
views
Explanation on Bastion Host
I've just setup my first bastion host in AWS and it made me think about the access. For an example:
user --> bastion (public) --> database (will only allow access from bastion IP on port 22)
It ...
0
votes
2
answers
2k
views
Run 'kubectl' commands from my localhost to GKE - but via tunnelling through a bastion host
Currently...
I have a GKE/kubernetes/k8s cluster in GCP. I have a bastion host (Compute Engine VM Instance) in GCP. I have allowlisted my bastion host's IP in the GKE cluster's Master authorized ...
0
votes
1
answer
317
views
Getting Error while connecting public to private server on Oracle cloud
ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa [email protected] -W %h:%p %r' -i ~/.ssh/id_rsa [email protected]
ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa opc@<publiIP> -W %h:%p %r' -i ~/.ssh/id_rsa opc@...
- 1
1
vote
1
answer
1k
views
How to check Bastion login logs in Azure to VM
We share a domain admin account credential for one of our Active Directory VM stored in Azure. Users will connect to the VM via Bastion in Azure.
Currently someone disabled a user in the AD and we ...
- 11
3
votes
1
answer
1k
views
How to properly make an ssh bastion, with fail2ban, in a Docker container
I've already asked the question on the Docker forums but so far no luck with a reply. I'm hoping I will have better fortune here.
I’m in the process of making an ssh bastion (with fail2ban for ...
- 123
0
votes
1
answer
435
views
AWS Session Manager SSH MFA
I know that it's possible to enable SSH access with AWS Session Manager and use MFA with Bastion. My question is, can I combine the two? I want to ssh into an EC2 instance proxying through Session ...
- 1
1
vote
1
answer
497
views
Ansible on EC2 with bastionhost and private key authentication and Active Directory validation
In our setup we have to access EC2 instances via a bastionhost. This bastionhost is connected to an Active Directory where it validates the credentials of the user who connects. From the bastion host ...
- 213
2
votes
1
answer
467
views
SSH CA-signed key fails via bastion
I'm setting up some servers for a new system and decided to do things a little bit differently. I'm running into an issue that I just can't seem to get past though. My desired configuration is having ...
- 71
0
votes
0
answers
4k
views
Could not resolve hostname nodename nor servname provided, or not known only with rsync
I work with sensitive data, so my host requires that I use a bastion to access the server.
I can connect to the server without any problem in SSH using the following command: ssh userremotemachine@...
- 101
0
votes
1
answer
804
views
Allowing external access to bastion hosts on aws
I am trying to create a few bastion hosts in my VPC on aws to connect to my databases that are located in a private subnet. I am using this aws Quick start.
I understand the basics of CIDR blocks ...
- 103
2
votes
3
answers
457
views
AWS - Bastion checking IAM permissions?
Is it possible to set up a bastion host in AWS that would be checking IAM to check if given user can connect to specific EC2 instance?
It might be a bit blurry but the idea is following.
Let's ...
- 153
0
votes
1
answer
84
views
Is connection to Bastion Server Open to Anyone
My team uses a Bastion Server as a tunnel server to secure our AWS EC2 instances. The connection to Bastion was configured based on this article.
To the best of my understanding, the Bastion server ...
5
votes
1
answer
3k
views
GCP: Run kubectl exec on private cluster over proxy
I have a private kubernetes cluster with private ip.
In order to access it i have set up a bastion host with squid proxy.
It looks like this:
My host -> bastion -> private cloud
Regular ...
- 177
0
votes
2
answers
8k
views
SSH through bastion host gives: open failed: connect failed: Connection timed out
We have bastion server B. We need to SSH from A through B to C, using private key (we use keepass with keeAgent).
In the bastion I have: AllowTcpForwarding yes.
I tried to use proxyCammand:
Host ...
- 223
11
votes
3
answers
6k
views
Bastion server: use TCP forwarding VS placing private key on server
We have bastion server B.
We need to SSH from A through B to C, using private key.
What is the better option:
Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
- 223
2
votes
0
answers
4k
views
PuTTY configuration with plink for keyboard-interactive authentication
Please see EDIT #2 for latest findings
I've looked at other similar questions but, unfortunately, none of them seemed to help. This one is the closest and my symptoms are similar.
Here's the issue:
...
2
votes
0
answers
199
views
Reaching any server on a separate network with proxy+ssh
I have server A sitting in network A. Server A is able to connect to a bastion host in network B via ssh. This bastion host is able to reach any port on any server in network B.
From any server in ...
- 2,273
0
votes
1
answer
3k
views
How to use socket file to access server if SSH Agent forwarding is enabled
I have bastion host. I connect to the bastion host using username/password. And I have private key for destination Server. Flow:
Local Machine -> Bastion -> Destination
I know that It's ...
- 161
0
votes
1
answer
5k
views
Setting up SSH jump box for Ansible - can't connect
I'm trying to use Ansible to deploy to an AWS host that does not have a public IP address. I'm able to reach the host manually by ssh onto a jump box, and on that box ssh onto the private machine ...
- 317
2
votes
2
answers
866
views
Securely sharing SSH access in a team with SSH bastion
I need to share SSH access to a number of servers with my teammates and looking for a secure way to do it. I came up with a configuration involving a SSH bastion server, but not sure how (and if) it ...
- 141
1
vote
2
answers
9k
views
Eroor: $ ssh: Could not resolve hostname [HOSTNAME]: Name or service not known
I am on windows 10 machine. I need to ssh to our Bastion and then do port forwarding to connect to AWS instance. I have a config file that I use to ssh.
My config file is as following:
Host [host]
...
- 41
3
votes
1
answer
5k
views
SSH Tunnel through bastion host
I'm having an issue with establishing an ssh tunnel through a bastion host.
Having looked through various SE questions which potentially solve the problem, nothing has.
My ssh config file (local)
...
- 161
2
votes
2
answers
6k
views
Can we use Linux Bastion Server to connect to Windows instance in AWS private subnet?
I have a windows local desktop and putty installed on it. Now I want to know -
In AWS setup whether we can use Linux Bastion host to connect to Windows Ec2 instances in private subnet by using agent ...
- 41
0
votes
1
answer
317
views
Restrict ssh users remote IP via LDAP record
Our setup:
LDAP server - OpenLDAP with openssh and sudo schemas.
Bastion server - accepts SSH from anywhere and authenticates users via public keys stored in LDAP (using sssd)
Destination server[s] - ...
- 794
14
votes
3
answers
12k
views
SSH host key checking cannot disable when using proxy jump
I am trying to SSH through a jumpbox, but SSH seems to be intent on checking host keys for the jumpbox, even though I'm telling it not to, using the normal -o StrictHostKeyChecking=no -o ...
- 579
0
votes
0
answers
99
views
Bastion Server + EC2 Instances
I would to protect my VPC using a bastion. So I add to the bastion only the public keys. But I have some EC2 instances inside my VPC.
Do I need to add the public both to bastion and EC2 instances?
- 101
12
votes
7
answers
16k
views
SSH through intermediate host fails only on myuser@mymac but works elsewhere
I am not able to connect via ssh to one of my datacenter nodes using my user on my macbook. This is a recent problem, and it was perfectly funtional since ~ a couple of weeks ago.
Strangely, this ...
- 344
0
votes
2
answers
817
views
how to access host behind a bastion?
I have bunch of hosts that can be accessed only from bastion hosts ( A linux server where I can ssh into and access my real host ).
Iam able to access it using firefox with socks proxy, now How can I ...
- 71
9
votes
2
answers
6k
views
ssh-keyscan through a bastion
I have some test servers running behind a bastion on Openstack. The test stack gets deleted and created often. After the stack is created I run a set of Ansible scripts to install and configure the ...
- 143
2
votes
1
answer
223
views
Using bastionssh with config file
I am attempting to use bastionssh to access a number of other servers. My point of contact is a colleague who is based on the other side of the world so getting information can be tricky. He provided ...
- 123
2
votes
1
answer
5k
views
Connect to RabbitMQ (Amqp) via ssh gateway
I have the following situation:
DevMachine (D) need to connect to a gateway/bastion server (G)
and then be able to talk to another server serving RabbitMQ (R) traffic on port 5672.
I tried using an ...
- 163
9
votes
1
answer
2k
views
Ansible - Access through Bastion w/ MFA
In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled.
I've managed to get Ansible to successfully talk to servers through the bastion, ...
- 191
Related Tags
ssh × 35
amazon-web-services × 10
linux × 9
amazon-ec2 × 6
proxy × 6
ssh-tunnel × 5
azure × 5
security × 5
port-forwarding × 3
ansible × 3
amazon-vpc × 2
authentication × 2
ssh-keys × 2
ssh-agent × 2
vpn × 2
tinyproxy × 1
terraform × 1
sssd × 1
socks × 1
smtp × 1
private-key × 1
postgresql × 1
rsync × 1
more related tags
Hot Network Questions
- What is the function of bootstrap.log?
- Career change: Entering Academia realistic at 36?
- Am I Doing It Wrong? Why Can't I Use Multiple 5-Line Staves to Represent Guitar's Open Strings?
- Is there a way to rate Pokemon decks so that players can be evenly matched?
- What is the legal basis of Kate Middleton's threats against paparazzi photographing her in public?
- Understanding Mathlib/MeasureTheory Notation
- During World War II, did the Luftwaffe try to bomb 10 Downing Street?
- Evolve global classes in 1GP Managed packages (e.g. add method)
- Does this expression always vanish?
- How loud are tubular bells?
- Visualization of two nearly identical datasets of 2D points
- Why, wide fan blades?
- Can I lessen the use of boolean flag variables in this snippet?
- The Minhag to break specifically glass by Chatan leg in wedding
- Reducing π to zero (again)
- What caused the deterioration of relations between Poland and Ukraine?
- Should I decline a PhD offer due to writing problems?
- Strong open-source license that forbids limiting innovation
- Peaks, plateaus and ledges
- When does Bitcoin Core allow you to "Abandon transaction"?
- Numbers that are averages of their digits
- Animated show with a main character named Nazire or Nasir who has a companion with dragon parents
- Will my Hydra sink into the bog?
- Reverse the rotation of an animated gif and create a mirror image of it