#Blanket bastion part 2 password#

SSH has been the de-facto admin standard for quite some time now – replacing obsolete programs such as rlogin, that were happily transferring your password in plaintext over the network – so we use it all the time, as most of the industry does.

But regardless of this heterogeneity, do you know what they all have in common? Yes, they all ping, but there’s something more interesting: they can all be administered through ssh. We also have a lot of network devices, split against different constructors, spanning a wide range of model generations.Īs you’ve probably guessed, we have heterogeneous systems that are running to provide a handful of different services. We also had Solaris boxes, that later turned into OmniOS boxes, that have now turned into shiny FreeBSD boxes. As long as it has a CPU (or vCPU), we probably booted some kind of Linux distro on it. We even had good old Gentoos once! These are all stored on bare metal servers, on VMs, and in containers everywhere. We have a lot of different flavours such as Debian, Ubuntu, Red Hat… and the list goes on. Learn more by reading the blog post series that announced the release:Īt OVHcloud, a fair amount of our infrastructures are built on top of Linux boxes. Bastions are a cluster of machines used as the unique entry point by operational teams (such as sysadmins, developers, database admins, to securely connect to devices (servers, virtual machines, cloud instances, network equipment, …), usually using ssh.īastions provides mechanisms for authentication, authorization, traceability and auditability for the whole infrastructure.

Blanket bastion part 2