> What would you recommend instead of a bastion host? The question isn't to replace, but to remove. If you apply the same security to the actual hosts (which y

> What would you recommend instead of a bastion host? The question isn't to replace, but to remove. If you apply the same security to the actual hosts (which you probably should anyway) then why have an intermediary?