Hide use of jump host

Archives AWX Project
1

Is there a preferred/documented/correct way of hiding the fact that an SSH jump host is being used? I’d like to avoid having to use, say, a group variable ansible_ssh_common_args, and the only other method which has worked for me is to add a configuration to /etc/ssh/ssh_config.d/90-jpmens.conf and adding IdentityFile and ProxyCommand for Host *

Any other suggestions?

-JP

2

Define “hiding the fact”. It’s possible to do quite a lot with $HOME/ssh/config, for example, or /etc/ssh/ssh_config. But “hiding the SSH jumpgate” is kind of like “hiding the man-in-th-middle monitor from your browser”. It creates a raft of security issues.

Nico Kadel-Garcia

Senior DevOps Engineer

Cengage Learning

200 Pier Four Blvd.

Boston, MA 02210

nico.kadel-garcia@cengage.com