# Hide use of jump host

**URL:** <https://forum.ansible.com/t/hide-use-of-jump-host/32432>\
**Category:** AWX Project\
**Created:** [March 10, 2020, 3:26pm UTC](https://forum.ansible.com/t/hide-use-of-jump-host/32432 "2020-03-10T15:26:52Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jpmens1](https://avatars.discourse-cdn.com/v4/letter/j/e9c0ed/32.png) [@jpmens1](https://forum.ansible.com/u/jpmens1)\
**Post date:** [March 10, 2020, 3:26pm UTC](https://forum.ansible.com/t/hide-use-of-jump-host/32432/1 "2020-03-10T15:26:52Z")

</div>

Is there a preferred/documented/correct way of hiding the fact that an SSH jump host is being used? I’d like to avoid having to use, say, a group variable ansible\_ssh\_common\_args, and the only other method which has worked for me is to add a configuration to /etc/ssh/ssh\_config.d/90-jpmens.conf and adding IdentityFile and ProxyCommand for Host \*

Any other suggestions?

-JP

---

<div class="post-metadata">

**Author:** ![Kadel-Garcia\_Nico](https://avatars.discourse-cdn.com/v4/letter/k/dbc845/32.png) [@Kadel-Garcia\_Nico](https://forum.ansible.com/u/Kadel-Garcia_Nico)\
**Post date:** [March 12, 2020, 8:17pm UTC](https://forum.ansible.com/t/hide-use-of-jump-host/32432/2 "2020-03-12T20:17:33Z")

</div>

Define “hiding the fact”. It’s possible to do quite a lot with $HOME/ssh/config, for example, or /etc/ssh/ssh\_config. But “hiding the SSH jumpgate” is kind of like “hiding the man-in-th-middle monitor from your browser”. It creates a raft of security issues.

**Nico Kadel-Garcia**

Senior DevOps Engineer

Cengage Learning

200 Pier Four Blvd.

Boston, MA 02210

[nico.kadel-garcia@cengage.com](mailto:nico.kadel-garcia@cengage.com)
