Documentation

Bastion Host

The CloudSOE Bastion Host image is a purpose-built SSH jump server on a hardened Ubuntu base with SSSD, realmd, Kerberos and Samba tooling for joining Active Directory domains, fail2ban for brute-force protection, ntpd-rs time sync and AIDE file-integrity monitoring initialised on first boot. Key-based SSH only — passwords are disabled.

Getting Started

AWS Marketplace

Getting Started with the Bastion Host on AWS

Launch the CloudSOE Bastion Host image from the AWS Marketplace, open only port 22, and start jumping to your private instances with ssh -J.

 Azure Marketplace

Getting Started with the Bastion Host on Azure

Deploy the CloudSOE Bastion Host image from the Azure Marketplace, allow only port 22 in your network security group, and start jumping to private VMs with ssh -J.

Guides

Configuration

Configuring the Bastion Host on Your CloudSOE Instance

Day-two setup for the CloudSOE Bastion Host — joining an Active Directory domain with realmd/sssd, tuning fail2ban jails, running AIDE integrity checks and verifying time sync.

 Tips & Tricks

Bastion Host Tips & Tricks on CloudSOE Images

ProxyJump SSH config blocks, agent-forwarding hygiene, session recording ideas, keeping the AIDE database current and locking down bastion network access.

Supported Platforms

AWS Marketplace Deploy directly from AWS Marketplace. Billed through your existing AWS account — one invoice, no separate contracts. Azure Marketplace Deploy directly from Azure Marketplace. Billed through your existing Azure account with consolidated invoicing.

Release History

No releases published yet.

See the full changelog for releases across all projects.