https://agora.nasqueron.org/index.php?action=history&feed=atom&title=Operations_grimoire%2FRecommended_SSH_configuration 2026-04-25T02:43:05Z Revision history for this page on the wiki MediaWiki 1.46.0-alpha https://agora.nasqueron.org/index.php?title=Operations_grimoire/Recommended_SSH_configuration&diff=2034&oldid=prev 2025-10-02T21:24:39Z

<p>Created page with &quot;== Consolidated OpenSSH configuration == The introduction of ProxyJump has simplified the bastion configuration since OpenSSH version 7.5: &lt;syntaxhighlight&gt; Host *.nasqueron.drake ProxyJump windriver.nasqueron.org Host 172.27.27.* ProxyJump windriver.nasqueron.org &lt;/syntaxhighlight&gt; Older version of OpenSSH can use instead: &lt;code&gt;ProxyCommand &quot;ssh -W %h:%p windriver.nasqueron.org&quot;&lt;/code&gt; == Use bastion as proxy == To connect on a server where the port 22 i...&quot;</p> <p><b>New page</b></p><div>== Consolidated OpenSSH configuration ==<br /> <br /> The introduction of ProxyJump has simplified the bastion configuration since OpenSSH version 7.5:<br /> <br /> &lt;syntaxhighlight&gt;<br /> Host *.nasqueron.drake<br /> ProxyJump windriver.nasqueron.org<br /> <br /> Host 172.27.27.* <br /> ProxyJump windriver.nasqueron.org<br /> &lt;/syntaxhighlight&gt;<br /> <br /> Older version of OpenSSH can use instead: &lt;code&gt;ProxyCommand &quot;ssh -W %h:%p windriver.nasqueron.org&quot;&lt;/code&gt;<br /> <br /> == Use bastion as proxy ==<br /> <br /> To connect on a server where the port 22 isn&#039;t publicly accessible, use a development server as a bastion.<br /> <br /> Do you do extensive work on the development server?<br /> * YES -&gt; a good workflow is to create a tmux panel for your remote server connection<br /> * NO -&gt; use the development server as proxy<br /> <br /> All the following works:<br /> <br /> &lt;syntaxhighlight lang=&quot;shell&quot;&gt;<br /> # Connect first to the bastion. Then, to the destination server (useful as tmux pane)<br /> $ ssh windriver.nasqueron.org<br /> $ ssh docker-002<br /> <br /> # Connect with ProxyJump option (OpenSSH 7.5+)<br /> $ ssh -J windriver.nasqueron.org 172.27.27.5<br /> <br /> # Connect with ProxyCommand option for older OpenSSH clients<br /> $ ssh -o ProxyCommand=&quot;ssh -W %h:%p windriver.nasqueron.org&quot; docker-002.nasqueron.drake<br /> &lt;/syntaxhighlight&gt;<br /> <br /> Note you can generally use short names, fully qualified names or IP. If a short name doesn&#039;t work, but the IP works, the /etc/hosts of the bastion needs to be updated.</div>

Dereckson