We’re launching Lyria 3.5 in Google Flow Music, with advances across musicality, lyrics, vocals, and creative control
deepmind.google·6d ago
AI Engineering
Lobsters·15d ago·5 min read
Using a SSH bastion, but only when I'm touching grass
TL;DR
Managing remote server access can be challenging, especially when outside the home network. A SSH bastion server is utilized to securely connect to other servers via a specific port.
✦ Why It Matters
Implement a SSH bastion server to enhance security and streamline remote access to your servers today.
Key Takeaways
- Use Match and ProxyJump for conditional SSH routing.
- Avoid unnecessary bastion hops when on the local network.
- Consider security risks with .local domains.
- Implement ForwardAgent cautiously to protect your SSH keychain.
How It Works
The author leverages the Match directive in SSH configuration to check if a host is reachable locally before deciding to route through the bastion server. If the local DNS lookup fails, the connection is routed through the bastion using ProxyJump, which simplifies the command structure compared to ProxyCommand.