I have a firewall that allows only a small range of IPv4s to my SSH servers. Then I have a bastion server with Teleport to access the servers when I'm not on a

I have a firewall that allows only a small range of IPv4s to my SSH servers. Then I have a bastion server with Teleport to access the servers when I'm not on an allowed network. I could have used Tailscale or OpenVPN or even OpenSSH again, but I went with Teleport. Mostly because it also supports Kubernetes well and does user management and MFA nicely. I also, for fun, did setup a GeoIP firewall on the bastion. It uses iptables and xtable-addons and a maxmind database. I blocked many countries that are known do such login attempts. I of course blocked myself out of the bastion during the setup of the GeoIP firewall.