# 14 Best Practices to Secure SSH Bastion Host

DevFeed: [14 Best Practices to Secure SSH Bastion Host](<https://devfeed.tech/articles/14-best-practices-to-secure-ssh-bastion-host-29837.md>)

Original publisher: [Read original article](<https://goteleport.com/blog/security-hardening-ssh-bastion-best-practices/>)

Author: sakshyam.shah@goteleport.com (Sakshyam Shah)

Published: 2022-01-13T00:00:00Z

Content type: tutorial

Language: en

Sources: [Teleport](<https://devfeed.tech/sources/teleport.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [OpenSSH](<https://devfeed.tech/topics/openssh.md>), [ssh](<https://devfeed.tech/topics/ssh.md>), [Server](<https://devfeed.tech/topics/server.md>), [Network Configuration](<https://devfeed.tech/topics/network-configuration.md>), [zero trust networking](<https://devfeed.tech/topics/zero-trust-networking.md>), [Ubuntu](<https://devfeed.tech/topics/ubuntu.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>)

Tags: [bastion](<https://devfeed.tech/tags/bastion.md>), [bastion-host](<https://devfeed.tech/tags/bastion-host.md>), [best-practices](<https://devfeed.tech/tags/best-practices.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [high-availability](<https://devfeed.tech/tags/high-availability.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [linux](<https://devfeed.tech/tags/linux.md>), [lts](<https://devfeed.tech/tags/lts.md>), [network](<https://devfeed.tech/tags/network.md>), [network-configuration](<https://devfeed.tech/tags/network-configuration.md>), [networking](<https://devfeed.tech/tags/networking.md>), [openssh](<https://devfeed.tech/tags/openssh.md>), [operations](<https://devfeed.tech/tags/operations.md>), [security](<https://devfeed.tech/tags/security.md>), [server](<https://devfeed.tech/tags/server.md>), [ssh](<https://devfeed.tech/tags/ssh.md>), [ubuntu](<https://devfeed.tech/tags/ubuntu.md>), [zero-trust-networking](<https://devfeed.tech/tags/zero-trust-networking.md>)

## AI overview

This tutorial presents 14 best practices for building and deploying a security-hardened SSH bastion host using OpenSSH. It covers reducing the server attack surface, configuring the surrounding network, applying zero trust networking principles, hardening the operating system and authentication, and deploying for high availability.

## Source excerpt

Learn 14 best practices to build and deploy a security-hardened SSH bastion host based on OpenSSH server.