Questions tagged [bastion]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
11 votes
3 answers
6k views

Bastion server: use TCP forwarding VS placing private key on server

We have bastion server B. We need to SSH from A through B to C, using private key. What is the better option: Put the private SSH key on server B. We read that it's a bad idea to do that in a ...
user2503775's user avatar
9 votes
2 answers
6k views

ssh-keyscan through a bastion

I have some test servers running behind a bastion on Openstack. The test stack gets deleted and created often. After the stack is created I run a set of Ansible scripts to install and configure the ...
Steve's user avatar
  • 143
1 vote
2 answers
3k views

Restricting per-user outgoing SSH

I have a server which I administer. It has port 22 access to many machines. I want to use it as a bastion host for some users. The catch is that I want each user on my server to have its own whitelist ...
Sankalp's user avatar
  • 113
0 votes
2 answers
9k views

SSH through bastion host gives: open failed: connect failed: Connection timed out

We have bastion server B. We need to SSH from A through B to C, using private key (we use keepass with keeAgent). In the bastion I have: AllowTcpForwarding yes. I tried to use proxyCammand: Host ...
user2503775's user avatar
0 votes
2 answers
2k views

Run 'kubectl' commands from my localhost to GKE - but via tunnelling through a bastion host

Currently... I have a GKE/kubernetes/k8s cluster in GCP. I have a bastion host (Compute Engine VM Instance) in GCP. I have allowlisted my bastion host's IP in the GKE cluster's Master authorized ...
Rakib's user avatar
  • 121