Comment configurer SSH-Jump Server

SSH Jumpstation. . , ssh – SSH Jump Server. .

• OpenSSH. , Linux- OpenSSH

• opensource- Teleport

, , Linux .

SSH Jump Server?

SSH Jump Server — Linux, , Linux SSH. SSH Jump Server jump host bastion host. SSH Jump Server — , . SSH SSH .

SSH-proxy? . SSH SSH Jump Server, ssh, «» . , Teleport SSH-proxy .

SSH Jump Server

SSH Jump-, - . , jump-. :

• jump-

• jump-

TCP SSH 22 .

SSH . OpenSSH, .

, :

• : example.com

• DNS- jump- proxy.example.com

, proxy.example.com — , .

OpenSSH

SSH- Linux, 100% , . jump- proxy.example.com, NAT -J :

$ ssh -J proxy.example.com 10.3.3.1

10.3.3.1 – , . .

-J proxy.example.com, SSH ~/.ssh/config :

Host 10.2.2.*
    ProxyJump proxy.example.com

, ssh 10.3.3.1, SSH- 10.3.3.1 , c proxy.example.com, 10.3.3.1 .

jump-, SSH jump- , . sshd, /etc/ssh/sshd_config:

# Do not let SSH clients do anything except be forwarded to the destination:
PermitTTY no
X11Forwarding no
PermitTunnel no
GatewayPorts no
ForceCommand /sbin/nologin

Debian , /sbin/nologin.

, jump- SSH, . jump-, ssh. jumpuser ssh-:

Match User jumpuser
  PermitTTY no
  X11Forwarding no
  PermitTunnel no
  GatewayPorts no
  ForceCommand /usr/sbin/nologin

SSH ~/.ssh/config:

Host 10.2.2.*
    ProxyJump jumpuser@proxy.example.com

SSH , man ssh_config man sshd_config.

, SSH jump-, .

Teleport

Teleport — SSH- , 2016 . Teleport .

• - SSH , - SSH -, SSH .

• SSH, Teleport «» , , - , :

, Teleport SSH:

• Teleport SSH- SSH. SSH-.

• Teleport SSH, jump- NAT, Kubernetes HTTP(s).

• Teleport Linux . , Github, Google Apps, , Okta Active Directory.

Teleport ( , jump-), . .

Teleport:

• HTTPS web-

• . SSH-

• , SSH

• Docker

• ,

• — . Teleport , .

• ,

• Teleport OpenSSH ( )

• ,

, , SSH-jump : OpenSSH Teleport.   ?

OpenSSH, :

• /

• jump-, ,

Teleport, :

• , « », .

• ,

 Cloud4Y

→ 

→  ,

→  Windows 95: ?

→ 

→  Bell Labs, 1960-

 Telegram-, . .

, : -65% IaaS-. 6 , !