Questions tagged [bastion]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
98 views

Tinyproxy error: Unable to connect to the server: Access denied

I installed tinyproxy 1.8.4 on a bastion host with public IP on GCP, to forward traffic to a private GKE cluster. Now I'm using ssh to connect to the bastion host with port forwarding and the ...
0
votes
1answer
87 views

Bastion host user access

I am using my bastion host to connect to internal servers as follows ssh -J user@BastionHost user@InternalServer Is it required to create user on Bastion host to jump to internal servers ? Or can we ...
0
votes
1answer
50 views

Deploying Bastion Host

I am trying to setup a bastion host for my online infrastructure. All my servers will be using public key for authentication. Currently I am able to connect to my bastion host using public key but I ...
1
vote
0answers
9 views

How can a TCP connection be passed through a routing server in AWS to its originator to avoid timeouts?

I'm a front end developer that has found myself needing to solve a backend issue with a site I'm working on. I did not set it up and am trying to understand how its currently structured. Within AWS ...
0
votes
1answer
75 views

Explanation on Bastion Host

I've just setup my first bastion host in AWS and it made me think about the access. For an example: user --> bastion (public) --> database (will only allow access from bastion IP on port 22) It ...
0
votes
1answer
319 views

Run 'kubectl' commands from my localhost to GKE - but via tunnelling through a bastion host

Currently... I have a GKE/kubernetes/k8s cluster in GCP. I have a bastion host (Compute Engine VM Instance) in GCP. I have allowlisted my bastion host's IP in the GKE cluster's Master authorized ...
0
votes
1answer
49 views

Getting Error while connecting public to private server on Oracle cloud

ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa opc@0.0.0.0 -W %h:%p %r' -i ~/.ssh/id_rsa opc@0.0.0.0 ssh -t -o ProxyCommand='ssh -i ~/.ssh/id_rsa opc@<publiIP> -W %h:%p %r' -i ~/.ssh/id_rsa opc@...
0
votes
1answer
244 views

How to check Bastion login logs in Azure to VM

We share a domain admin account credential for one of our Active Directory VM stored in Azure. Users will connect to the VM via Bastion in Azure. Currently someone disabled a user in the AD and we ...
1
vote
1answer
330 views

How to properly make an ssh bastion, with fail2ban, in a Docker container

I've already asked the question on the Docker forums but so far no luck with a reply. I'm hoping I will have better fortune here. I’m in the process of making an ssh bastion (with fail2ban for ...
0
votes
1answer
245 views

AWS Session Manager SSH MFA

I know that it's possible to enable SSH access with AWS Session Manager and use MFA with Bastion. My question is, can I combine the two? I want to ssh into an EC2 instance proxying through Session ...
1
vote
1answer
175 views

Ansible on EC2 with bastionhost and private key authentication and Active Directory validation

In our setup we have to access EC2 instances via a bastionhost. This bastionhost is connected to an Active Directory where it validates the credentials of the user who connects. From the bastion host ...
2
votes
1answer
323 views

SSH CA-signed key fails via bastion

I'm setting up some servers for a new system and decided to do things a little bit differently. I'm running into an issue that I just can't seem to get past though. My desired configuration is having ...
0
votes
0answers
3k views

Could not resolve hostname nodename nor servname provided, or not known only with rsync

I work with sensitive data, so my host requires that I use a bastion to access the server. I can connect to the server without any problem in SSH using the following command: ssh userremotemachine@...
0
votes
1answer
429 views

Allowing external access to bastion hosts on aws

I am trying to create a few bastion hosts in my VPC on aws to connect to my databases that are located in a private subnet. I am using this aws Quick start. I understand the basics of CIDR blocks ...
2
votes
3answers
258 views

AWS - Bastion checking IAM permissions?

Is it possible to set up a bastion host in AWS that would be checking IAM to check if given user can connect to specific EC2 instance? It might be a bit blurry but the idea is following. Let's ...
0
votes
1answer
46 views

Is connection to Bastion Server Open to Anyone

My team uses a Bastion Server as a tunnel server to secure our AWS EC2 instances. The connection to Bastion was configured based on this article. To the best of my understanding, the Bastion server ...
2
votes
1answer
1k views

GCP: Run kubectl exec on private cluster over proxy

I have a private kubernetes cluster with private ip. In order to access it i have set up a bastion host with squid proxy. It looks like this: My host -> bastion -> private cloud Regular ...
0
votes
2answers
4k views

SSH through bastion host gives: open failed: connect failed: Connection timed out

We have bastion server B. We need to SSH from A through B to C, using private key (we use keepass with keeAgent). In the bastion I have: AllowTcpForwarding yes. I tried to use proxyCammand: Host ...
10
votes
3answers
4k views

Bastion server: use TCP forwarding VS placing private key on server

We have bastion server B. We need to SSH from A through B to C, using private key. What is the better option: Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
2
votes
0answers
3k views

PuTTY configuration with plink for keyboard-interactive authentication

Please see EDIT #2 for latest findings I've looked at other similar questions but, unfortunately, none of them seemed to help. This one is the closest and my symptoms are similar. Here's the issue: ...
2
votes
0answers
144 views

Reaching any server on a separate network with proxy+ssh

I have server A sitting in network A. Server A is able to connect to a bastion host in network B via ssh. This bastion host is able to reach any port on any server in network B. From any server in ...
0
votes
1answer
2k views

How to use socket file to access server if SSH Agent forwarding is enabled

I have bastion host. I connect to the bastion host using username/password. And I have private key for destination Server. Flow: Local Machine -> Bastion -> Destination I know that It's ...
0
votes
1answer
4k views

Setting up SSH jump box for Ansible - can't connect

I'm trying to use Ansible to deploy to an AWS host that does not have a public IP address. I'm able to reach the host manually by ssh onto a jump box, and on that box ssh onto the private machine ...
0
votes
1answer
466 views

Securely sharing SSH access in a team with SSH bastion

I need to share SSH access to a number of servers with my teammates and looking for a secure way to do it. I came up with a configuration involving a SSH bastion server, but not sure how (and if) it ...
0
votes
2answers
5k views

Eroor: $ ssh: Could not resolve hostname [HOSTNAME]: Name or service not known

I am on windows 10 machine. I need to ssh to our Bastion and then do port forwarding to connect to AWS instance. I have a config file that I use to ssh. My config file is as following: Host [host] ...
3
votes
1answer
4k views

SSH Tunnel through bastion host

I'm having an issue with establishing an ssh tunnel through a bastion host. Having looked through various SE questions which potentially solve the problem, nothing has. My ssh config file (local) ...
1
vote
2answers
5k views

Can we use Linux Bastion Server to connect to Windows instance in AWS private subnet?

I have a windows local desktop and putty installed on it. Now I want to know - In AWS setup whether we can use Linux Bastion host to connect to Windows Ec2 instances in private subnet by using agent ...
0
votes
1answer
181 views

Restrict ssh users remote IP via LDAP record

Our setup: LDAP server - OpenLDAP with openssh and sudo schemas. Bastion server - accepts SSH from anywhere and authenticates users via public keys stored in LDAP (using sssd) Destination server[s] - ...
7
votes
3answers
7k views

SSH host key checking cannot disable when using proxy jump

I am trying to SSH through a jumpbox, but SSH seems to be intent on checking host keys for the jumpbox, even though I'm telling it not to, using the normal -o StrictHostKeyChecking=no -o ...
0
votes
0answers
93 views

Bastion Server + EC2 Instances

I would to protect my VPC using a bastion. So I add to the bastion only the public keys. But I have some EC2 instances inside my VPC. Do I need to add the public both to bastion and EC2 instances?
8
votes
5answers
8k views

SSH through intermediate host fails only on myuser@mymac but works elsewhere

I am not able to connect via ssh to one of my datacenter nodes using my user on my macbook. This is a recent problem, and it was perfectly funtional since ~ a couple of weeks ago. Strangely, this ...
-1
votes
2answers
600 views

how to access host behind a bastion?

I have bunch of hosts that can be accessed only from bastion hosts ( A linux server where I can ssh into and access my real host ). Iam able to access it using firefox with socks proxy, now How can I ...
5
votes
2answers
4k views

ssh-keyscan through a bastion

I have some test servers running behind a bastion on Openstack. The test stack gets deleted and created often. After the stack is created I run a set of Ansible scripts to install and configure the ...
2
votes
1answer
193 views

Using bastionssh with config file

I am attempting to use bastionssh to access a number of other servers. My point of contact is a colleague who is based on the other side of the world so getting information can be tricky. He provided ...
1
vote
1answer
3k views

Connect to RabbitMQ (Amqp) via ssh gateway

I have the following situation: DevMachine (D) need to connect to a gateway/bastion server (G) and then be able to talk to another server serving RabbitMQ (R) traffic on port 5672. I tried using an ...
9
votes
1answer
1k views

Ansible - Access through Bastion w/ MFA

In my current environment, I have all my Linux servers only accessible through a bastion host, which has MFA enabled. I've managed to get Ansible to successfully talk to servers through the bastion, ...
19
votes
1answer
11k views

Relationship between bastion host and jump host

What's are the differences/similarities between a "bastion host" and a "jump host"? Are they usually used interchangeably?
0
votes
1answer
183 views

Automatically forwarding from Bastion to next server?

We at work use Bastion in our VPC to connect to several private servers, I have set up aliases (ssh host aliases) to speed up the process of bouncing to the next server, but this is a slow process and ...
2
votes
0answers
816 views

How to know if a bastion or vpn is the right solution? [closed]

How do you choose between using a bastion or VPN when providing access to a vlan? I have seen many different setups, but don't have a good idea on how to make a less subjective selection. Is there a ...
1
vote
2answers
2k views

Restricting per-user outgoing SSH

I have a server which I administer. It has port 22 access to many machines. I want to use it as a bastion host for some users. The catch is that I want each user on my server to have its own whitelist ...
3
votes
2answers
1k views

Should a NAT host be separate from a Bastion host

Have a private network with servers that required SSH access. Since the instances are in a private subnet, they cannot be accessed directly via SSH and require a public Bastion host to access. ...