Some tips: - Customise ~/.ssh/config to suite your needs (be careful with storm - manage ssh like a boss, it helps when scripting or searching hosts but has a

Some tips: - Customise ~/.ssh/config to suite your needs (be careful with storm - manage ssh like a boss, it helps when scripting or searching hosts but has a outstanding bug converting keywords to lowercase [1]) - Use ed25519 key over RSA - OpenSSH 8.1 added support for FIDO/U2F (use your YubiKey or equivalent) - Put `IPQoS lowdelay throughput` in your ~/.ssh/config if you run a rolling release (e.g. Arch, Gentoo) or your openssh rolls via homebrew on macOS. latest openssh client with older version of sshd may produce weird disconnection issues (server reset connection, client side is able to connect but terminal hangs in 5~10s). Spend quite some time digging only to find that it was caused by default change for IPQoS (to IPQoS af21 cs1) introduced in OpenSSH 7.8p1 [3] - leverage ssh-copy-id - ssh -vvv | ssh -G (troubleshooting from client side) - /usr/sbin/sshd -p 2222 -f /path/to/sshd_config -D -ddd (troubleshooting sshd server side) - Be careful with `UsePAM no`, make sur - use AllowUsers / DenyUsers vs DenyGroups vs AllowGroups , mind the order - know how to use ssh-add / ssh-keygen / ssh-agent / ssh-keyscan - audit SSH config (ssh-audit / lynis), version control ssh_config / sshd_config properly if possible - openssh + tmux ;-) Personal favourite tips/tricks: - ssh -D (used to use this dynamic port forwarding, open a local Socks5 proxy to punch hole in firewall, encrypt traffic, it worked for a while against the infamous GFW, only a little while though) - ssh -L | -R TCP forwarding - ssh -X | -Y X11 forwarding (run X11 apps remotely and display it on X Server locally) - More personal SSH tricks put together over the years, surprise to find that my person OpenSSH notes are 150+ pages in Google Docs, sorry can't put all in a comment... [2] - RTFM works, OpenSSH is worth the time ;-) [1]: https://github.com/emre/storm/issues/157 https://github.com/emre/storm/issues/157 [2]: https://sites.google.com/site/imterry/computer/tools/ssh https://sites.google.com/site/imterry/computer/tools/ssh [3]: ssh(1)/sshd(8): the default IPQoS used by ssh/sshd has changed. https://www.openssh.com/releasenotes.html https://www.openssh.com/releasenotes.html