OpenSSH jump host

An sshd relay reached with ProxyJump, with stock key and password authentication and no session recording.

Provider: default
Kind: Bastion host
Category: Security
Official docs: https://man.openbsd.org/sshd_config

Properties · 5 set by this component

property	type	values	required	kind default	this component
justInTimeAccess	boolean	—	no	false	▸ false
listenPort · component property	integer	—	no	22	inherited
managed	boolean	—	no	false	▸ false
mfaRequired	boolean	—	no	—	▸ false
passwordAuthentication · component property	boolean	—	no	true	inherited
permitRootLogin · component property	enum	yes \| prohibit-password \| forced-commands-only \| no	no	prohibit-password	inherited
protocols	enum	ssh \| rdp \| both	no	—	▸ ssh
publicIp	boolean	—	no	—	inherited
sessionRecording	boolean	—	no	—	▸ false
tcpForwarding · component property	boolean	—	no	true	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "ssh-jump-host", component: "ssh-jump-host" }

Other Bastion host products · 17

Bastionhostalibaba-bastionhostalibabacloudbastion-host EC2 Instance Connect Endpointaws-ec2-instance-connect-endpointawsbastion-host AWS Systems Manager Session Manageraws-ssm-session-managerawsbastion-host AWS Verified Accessaws-verified-accessawsbastion-host Azure Bastionazure-bastionazurebastion-host Microsoft Entra Private Accessazure-entra-private-accessazurebastion-host Cloudflare Accesscloudflare-accesscloudflarebastion-host Cloudflare One RDPcloudflare-rdpcloudflarebastion-host Generic bastion hostbastion-hostbastion-host HashiCorp Boundaryboundarybastion-host ContainerSSHcontainersshbastion-host Paralusparalusbastion-host Pomeriumpomeriumbastion-host Teleportteleportbastion-host Chrome Enterprise Premiumgoogle-chrome-enterprise-premiumgcpbastion-host Identity-Aware Proxygoogle-identity-aware-proxygcpbastion-host Bastionoci-bastionocibastion-host

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# OpenSSH jump host: an sshd relay reached with ProxyJump. sshd_config defaults are
3# Port 22, PubkeyAuthentication yes, PasswordAuthentication yes, PermitRootLogin
4# prohibit-password and AllowTcpForwarding yes; there is no session recording or MFA.
5schemaVersion: "1"
6type: "component"
7id: "ssh-jump-host"
8kind: "bastion-host"
9provider: "default"
10docs: "https://man.openbsd.org/sshd_config"
11defaults:
12  managed: false
13  protocols: "ssh"
14  sessionRecording: false
15  mfaRequired: false
16  justInTimeAccess: false
17properties:
18  listenPort:
19    type: "integer"
20    default: 22
21  passwordAuthentication:
22    type: "boolean"
23    default: true
24  tcpForwarding:
25    type: "boolean"
26    default: true
27  permitRootLogin:
28    type: "enum"
29    values: ["yes", "prohibit-password", "forced-commands-only", "no"]
30    default: "prohibit-password"

The same page as markdown, for an agent: /catalogue/components/ssh-jump-host.md