Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • OK, but why is this better than my working multihop? Commented Jan 18, 2016 at 13:55
  • 1
    @bmargulies, because once it is configured you can just do "ssh THIRD-HOST" completely transparently and forget about the relay hosts. Moreover, you do not have to manage/allocate port numbers. And it doesn't scale very well: you have to add -L flags at each layer. Commented Jan 20, 2016 at 18:33
  • One way this seems to be slightly different is key management - if I'm chaining ssh commands by hand then it can authenticate to bastion using an SSH key that lives on host-at-work. When attempting ProxyCommand key authentication fails, presumably as it's depending on local keys. Perhaps there are extra options that can fix this. Commented Feb 3, 2022 at 14:18