base-de-connaissances/gnu-linux/serveurs/securisation/bastion.md

% Bastion

Installation

Installation en cours: Devuan

ssh bastion

TODO

• linux - Limit SSH access to specific clients by IP address - Unix & Linux Stack Exchange
• Using iptables to prevent SSH brute force attacks and DDOS attacks
  • How to Block Brute-Force Attacks on SSH: Step by Step guide
• https://goteleport.com/blog/ssh-bastion-host/
• https://goteleport.com/blog/security-hardening-ssh-bastion-best-practices/
• https://goteleport.com/blog/ssh-key-management/
  • 14.3. Using OpenSSH Certificate Authentication | Deployment Guide | Red Hat Enterprise Linux | 6 | Red Hat Documentation

Sécurisation (ajouts possibles)

• Sécurisation d'un serveur Linux sous debian - HackMD
• Hardening - Debian Wiki
• Welcome to The Bastion documentation! — The Bastion 3.20.00 documentation

Webographie

• (1) Option for double bastion Terraform setup? | Proxmox Support Forum
• (1) Best practices for having a SSH jumphost | Proxmox Support Forum
• What is an SSH Bastion? | SSH Bastion host setup
• ssh - SSHFS over a jumphost - Server Fault

Certificats

• How to use Let's Encrypt with an SSH Bastion

Autres solutions

Comment configurer un serveur Bastion avec Warpgate sur Debian