Is there a preferred/documented/correct way of hiding the fact that an SSH jump host is being used? I’d like to avoid having to use, say, a group variable ansible_ssh_common_args, and the only other method which has worked for me is to add a configuration to /etc/ssh/ssh_config.d/90-jpmens.conf and adding IdentityFile and ProxyCommand for Host *
Any other suggestions?
-JP
Define “hiding the fact”. It’s possible to do quite a lot with $HOME/ssh/config, for example, or /etc/ssh/ssh_config. But “hiding the SSH jumpgate” is kind of like “hiding the man-in-th-middle monitor from your browser”. It creates a raft of security issues.
Nico Kadel-Garcia
Senior DevOps Engineer
Cengage Learning
200 Pier Four Blvd.
Boston, MA 02210
nico.kadel-garcia@cengage.com