Bastion Host
Given the lack of free IPs and the need to strenghten the security of the GNOME Infrastructure a bastion.gnome.org host has been setup. It's currently managing:
- VPN gateway
- Centralized SSH connections
- Web proxy (Squid)
Instructions for SSH connections
Accessing GNOME machines can be done by adding the following entries into your /home/$user/.ssh/config file:
Host bastion.gnome.org ProxyCommand none ForwardAgent no Host *.gnome.org User $uid StrictHostKeyChecking no ProxyCommand ssh -W vpn.%h:%p $uid@bastion.gnome.org
Connecting to the relevant machine will be as easy as doing:
ssh $machine_name.gnome.org