- Home
- SSH Server Software
- The Bastion
On the recordRead 9 Oct 202616 facts
The Bastion
Roubaix, France
Plans and prices
The Bastion
Free
Self-hosted; tested Linux distributions and FreeBSD versions are listed in the installation guide
Read 9 Oct 2026 · ovh.github.io
On the record
- Access controls
- It provides personal and group access schemes with delegated group roles.ovh.github.io · read 9 Oct 2026
- Auditability
- Allowed and denied accesses and actions are logged to syslog and/or local SQLite databases.ovh.github.io · read 9 Oct 2026
- Automation
- An optional Puppet module handles configuration and prerequisites.ovh.github.io · read 9 Oct 2026
- Compliance context
- The documentation says the code is used in production in environments certified for PCI-DSS, ISO 27001, SOC1, and SOC2.ovh.github.io · read 9 Oct 2026
- Deployment
- The installation guide says The Bastion expects to be the only main service running on its server.ovh.github.io · read 9 Oct 2026
- Integrations
- Documented integrations and protocols include MOSH, SCP, the NETCONF SSH subsystem, Yubico PIV keys, and HTTPS proxying.ovh.github.io · read 9 Oct 2026
- Intended users
- The documentation identifies sysadmins, developers, DevOps, and database administrators as examples of operational teams that use a bastion.ovh.github.io · read 9 Oct 2026
- JSON API
- The JSON API interacts with plugins over SSH, using the existing authentication and user isolation mechanisms rather than a separate HTTPS port.ovh.github.io · read 9 Oct 2026
- Logging
- It supports extensive syslog output for SIEM consumption.ovh.github.io · read 9 Oct 2026
- Protocol break
- It breaks the SSH protocol between ingress and egress connections, enabling session recording and access auditability.ovh.github.io · read 9 Oct 2026
- Purpose
- The Bastion is a single entry point for operational teams to securely connect to infrastructure machines, usually over SSH.ovh.github.io · read 9 Oct 2026
- Security model
- The security design uses UNIX discretionary access controls, maps bastion users and groups to system users and groups, and runs code with unprivileged account rights.ovh.github.io · read 9 Oct 2026
- Session recording
- It supports interactive and non-interactive session recording in ttyrec files.ovh.github.io · read 9 Oct 2026
- Supported operating systems
- The guide lists Debian, RockyLinux, Ubuntu LTS, OpenSUSE Leap, and FreeBSD versions tested with each release; FreeBSD has partial MFA support.ovh.github.io · read 9 Oct 2026
