3 ms·
Just use a jump server and put the rest of your servers on the private subnet for port 22 inbound. Expose your jump server to your vpn only and use 2fa on vpn.
by rorykoehler 8y ago
Just use a jump server and put the rest of your servers on the private subnet for port 22 inbound. Expose your jump server to your vpn only and use 2fa on vpn.
- cwingrav 8y agoThis is so simple to set up and completely removes random attacks. If your jump server/bastion host is attacked... take notice.
- romeisendcoming 8y agoRight. But only bring up your jump server when needed from a CSP. The rest of the time unseen and mostly unknown.