# bastion host Published articles for bastion host. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Four Ways Teleport Overcomes the Limitations of VPNs and Bastions DevFeed: [Four Ways Teleport Overcomes the Limitations of VPNs and Bastions]() Original publisher: [Read original article]() Author: eglenn@goteleport.com (Eddie Glenn) Published: 2025-01-27T00:00:00Z Content type: article Language: en Sources: [Teleport]() Topics: [Security](), [Virtual Private Network](), [Networks](), [Cloud](), [Scalability](), [Zero Trust](), [legacy](), [certificates]() Tags: [bastion-host](), [certificates](), [cloud](), [cloud-native](), [containers](), [networks](), [passwords](), [scalability](), [security](), [serverless](), [vpn](), [vulnerabilities](), [zero-trust]() ### AI overview This Teleport blog article describes limitations of VPNs and bastion hosts in modern cloud-native and distributed environments, including scalability, maintenance, credential management, security, and compliance challenges. It presents Teleport's credential-less, ephemeral access as the proposed alternative. ### Source excerpt Discover how Teleport overcomes VPN and bastion host limitations with zero trust principles, ephemeral certificates, and seamless access that improves security. ## Security Auditing Amazon RDS Database Activity with Teleport DevFeed: [Security Auditing Amazon RDS Database Activity with Teleport]() Original publisher: [Read original article]() Author: info@goteleport.com (Janakiram MSV) Published: 2022-06-08T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Amazon RDS](), [audit](), [Security](), [Amazon Web Services](), [Amazon DynamoDB](), [Amazon EC2](), [VPC]() Tags: [amazon-dynamodb](), [amazon-ec2](), [amazon-rds](), [audit](), [aws](), [bastion-host](), [cloudtrail](), [security](), [vpc]() ### AI overview This tutorial explains how to use Teleport to record and audit Amazon RDS database access events, including live session monitoring, audit logs for DDL and DML queries, and event storage in Amazon DynamoDB. ### Source excerpt This blog post explains how to record and audit Amazon RDS Database activities with Teleport. ## Securing Your MongoDB Database DevFeed: [Securing Your MongoDB Database]() Original publisher: [Read original article]() Author: info@goteleport.com (Kainaat Arshad) Published: 2022-05-24T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [MongoDB](), [Security](), [Firewall](), [Self-hosted](), [ssh](), [SSL](), [Windows]() Tags: [bastion](), [bastion-host](), [best-practices](), [database](), [firewall](), [hardening](), [how-to](), [linux](), [mongodb](), [network-security](), [security](), [self-hosted](), [ssh](), [ssl](), [tls](), [windows]() ### AI overview A tutorial on securing MongoDB deployments, covering self-hosted MongoDB and MongoDB Atlas. It discusses network security, TLS/SSL transport encryption, database privileges, firewalls, and SSH reverse tunneling through a bastion host. ### Source excerpt How to secure your MongoDB database for both self-hosted and MongoDB Atlas deployments. ## How to Audit SSH Sessions in Amazon EC2 DevFeed: [How to Audit SSH Sessions in Amazon EC2]() Original publisher: [Read original article]() Author: info@goteleport.com (Janakiram MSV) Published: 2022-04-19T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Amazon EC2](), [ssh](), [Tutorial](), [audit](), [Security](), [Amazon S3](), [DynamoDB](), [OpenSSH]() Tags: [amazon-cloudwatch](), [amazon-dynamodb](), [amazon-s3](), [audit](), [aws](), [bastion](), [bastion-host](), [cloudtrail](), [compliance](), [dynamodb](), [ec2](), [how-to](), [infrastructure](), [review](), [s3](), [security](), [security-events](), [ssh](), [storage](), [tutorial]() ### AI overview A tutorial on configuring Teleport to record and audit SSH sessions on Amazon EC2 Linux instances, including centralized session playback and storing Teleport events and recordings in Amazon DynamoDB and Amazon S3. ### Source excerpt This post is a tutorial to set up security session recording for EC2 SSH access and store logs in AWS S3 and DynamoDB. ## What is an SSH Bastion? | SSH Bastion host setup DevFeed: [What is an SSH Bastion? | SSH Bastion host setup]() Original publisher: [Read original article]() Author: ev@goteleport.com (Ev Kontsevoy) Published: 2022-04-04T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [ssh](), [OpenSSH](), [configuration](), [Linux](), [Security](), [Open Source]() Tags: [bastion](), [bastion-host](), [configuration](), [how-to](), [installation](), [linux](), [open-source](), [openssh](), [security](), [server](), [ssh]() ### AI overview This tutorial explains what an SSH bastion host is and how it differs from an SSH jump server or proxy. It covers setting up bastions with OpenSSH and another open-source SSH server, along with Linux hardening, firewall configuration, port changes, updates, and limiting the bastion to jump access. ### Source excerpt In this blog post, we'll go over the installation and configuration of SSH bastion hosts using two open source products. ## Tutorial: Set up an Identity-Aware Access Proxy as a Bastion Host in AWS DevFeed: [Tutorial: Set up an Identity-Aware Access Proxy as a Bastion Host in AWS]() Original publisher: [Read original article]() Author: info@goteleport.com (Janakiram MSV) Published: 2022-03-10T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Tutorial](), [Amazon Web Services](), [Zero Trust](), [Security](), [Amazon EC2](), [VPC](), [Amazon Elastic Kubernetes Service](), [Amazon RDS](), [DevOps](), [Open Source]() Tags: [amazon-ec2](), [amazon-eks](), [amazon-rds](), [amazon-web-services](), [authentication](), [aws](), [bastion](), [bastion-host](), [best-practices](), [devops](), [how-to](), [let](), [oidc](), [saml](), [security](), [tutorial](), [vpc]() ### AI overview This tutorial explains how to use Teleport, an open-source identity-aware access proxy, as a bastion host for securing AWS infrastructure. It focuses on replacing a traditional bastion host with a Teleport proxy and authentication server for SSH access to EC2 instances, while also describing access to services such as RDS and EKS. ### Source excerpt This post explains how to set-up AWS bastion host based on Teleport identity-aware access proxy. ## 14 Best Practices to Secure SSH Bastion Host DevFeed: [14 Best Practices to Secure SSH Bastion Host]() Original publisher: [Read original article]() Author: sakshyam.shah@goteleport.com (Sakshyam Shah) Published: 2022-01-13T00:00:00Z Content type: tutorial Language: en Sources: [Teleport]() Topics: [Security](), [OpenSSH](), [ssh](), [Server](), [Network Configuration](), [zero trust networking](), [Ubuntu](), [Amazon Web Services]() Tags: [bastion](), [bastion-host](), [best-practices](), [configuration](), [deployment](), [hardening](), [high-availability](), [infrastructure](), [linux](), [lts](), [network](), [network-configuration](), [networking](), [openssh](), [operations](), [security](), [server](), [ssh](), [ubuntu](), [zero-trust-networking]() ### AI overview This tutorial presents 14 best practices for building and deploying a security-hardened SSH bastion host using OpenSSH. It covers reducing the server attack surface, configuring the surrounding network, applying zero trust networking principles, hardening the operating system and authentication, and deploying for high availability. ### Source excerpt Learn 14 best practices to build and deploy a security-hardened SSH bastion host based on OpenSSH server. ## How to Inspect a Developer's SSH Session as Root DevFeed: [How to Inspect a Developer's SSH Session as Root]() Original publisher: [Read original article]() Author: Tom Published: 2016-04-27T00:00:00Z Content type: tutorial Language: en Sources: [Tomasz Gągor]() Topics: [ssh](), [configuration](), [systems]() Tags: [agent](), [bash](), [bastion](), [bastion-host](), [developers](), [how-to](), [linux](), [login](), [ssh]() ### AI overview A tutorial explains how a root user can inspect a developer's SSH session to troubleshoot login problems, including cases involving bastion hosts and SSH agent forwarding. It notes that this should only be done on systems the operator controls and is authorized to access. ### Source excerpt It happen to me all the time that one of developers notifies me about some kind of problem that I can't confirm from my account. Sometimes it was because of bad ssh keys configuration, other times file permissions, mostly such stuff. It's sometimes convenient to "enter into someone's shoes" to see what's going on there. If you're root on machine you may do that like this: Switch to developer user su developer - Easy one but that's not enough for all cases. When you use bastion host (or similar solutions) sometimes users have connection problems and it's harder to check. When such user have ForwardAgent ssh option enabled you may stole this session to check login problems. ## Use bastion host with Ansible DevFeed: [Use bastion host with Ansible]() Original publisher: [Read original article]() Author: Tom Published: 2016-04-22T00:00:00Z Content type: tutorial Language: en Sources: [Tomasz Gągor]() Topics: [Ansible](), [ssh](), [configuration]() Tags: [ansible](), [ansible-configuration](), [bash](), [bastion](), [bastion-host](), [cloud-security](), [config](), [configuration](), [devops](), [files](), [how-to](), [infrastructure-as-code](), [jump-host](), [proxycommand](), [security](), [ssh](), [ssh-proxy]() ### AI overview A tutorial on configuring Ansible and SSH to connect to hosts behind a secured bastion or jump host. It explains how to customize ssh_config and ansible.cfg, forward SSH keys and traffic, and use connection multiplexing. ### Source excerpt Learn how to configure Ansible to connect to hosts behind a bastion or jump host by customizing your ssh_config and ansible.cfg files.