Ssh proxy and ssh broker plus#

The easiest way to run Secure Shell proxy is Docker containers, there are available pre-build images at flussonic/ssh-proxy.

Now your support stuff can login to cloud servers unless you revoke this access.

Upload public keys on that proxy server.

Take public key from your engineers (e.g.

Upload the private key to a ssh-proxy server.

Use the console to generate key pair(s) for your environment.

Use the proxy to control access of your engineering team to cloud servers with similar workflow

Now your support stuff can login to customer server unless you revoke this access.

Take public key from your support personnel.

You can also set specific usernames and ports if they differ between the hosts: ssh -J user .

Ssh proxy and ssh broker plus#

To use it, specify the bastion host to connect through after the -J flag, plus the remote host: ssh -J

The access to this server has to be limited to yourself The ProxyJump, or the -J flag, was introduced in ssh version 7.3. Store private key on a private server that runs a proxy.SSH proxy is a daemon that helps you to control access of your support team to customers servers with following workflow: Of-the-shelf deployment to docker-based environments.

Please be aware that solution is still under development. All actions are logged so that you will be able to find, who have dropped production database.No need to share private key with all your team including fired people.No LDAP, Kerberos or any other nightmare technologies.Secondly, it solves a problem of SSH access provision in the ad-hoc cloud environment, where new servers automatically comes and goes. This tool will allow to put only one public key on server and maintain access through this key. If you put public keys of all your engineers on client's server, then you need to maintain list of client's servers to delete these keys and you need to disclose list of your people.ДЄll this is a bad idea, especially when you will corrupt authorized_keys on server by running your automation tool and client's simultaneously. Imagine that you need to ask for root access on client's server. It offers an alternative solution to authorized_keys. Anyone who needs centralized, secure and simples access governance to private server. This tool is for a company that provide support to clients, small engineering teams or start-ups. Most simples Secure Shell proxy to control access of your engineering/support team(s) to private servers.