• 0 Posts
  • 44 Comments
Joined 2 years ago
cake
Cake day: June 22nd, 2023

help-circle











  • If they require you to use the bastion, then trying to avoid it is probably a bad idea.

    If the bastion is running an ssh server, you can jump through it with ssh pass through (using -J).

    SSM provides session manager which allows you to skip having a bastion altogether- it basically lets you start an “ssh” session to a private instance without opening ports or networking using aws creds. This requires that you have access permissions to do this and that ssm is enabled.

    But… if the reason you are using the bastion is so that they can inspect the traffic, then they’re not gonna let you bypass it via ssm because that also bypasses the managed networking.







  • Pretty fair review, and I agree fully about the peace of mind hands off part. Could I build some awesome zfs cluster that does amazing things? Sure! But do I want to deal with that day to day for my home storage needs or just plug something in that “just works” out of the box? With time getting shorter and shorter for me these days, every few hours I don’t spend fixing or configuring something means more time with fam or hobbies. I’ve used synology units for almost 15 years and have never had an issue- no plans to scrap it and do it all myself any time soon.