Using a SSH bastion, but only when I'm touching grass
Summary
The article provides a practical guide to using a SSH bastion host for remote access, comparing ProxyCommand and ProxyJump, and discusses DNS considerations (split-horizon DNS and local domains) with security caveats around ForwardAgent. It includes concrete configuration examples and notes potential risks with local MDNS and implicit traffic through a bastion.