News for hackers. Stuff that matters.

A comment on Securing a Postgres Database. Parent comment

Re:Securing a Postgres Database by 120bits on Friday April 02, 2021 @04:35PM (#26675694)
Currently I have a postgres/timescaledb running on EC2 in VPC which has no internet access. I do VPN tunnel to access private local subnet and have security group settings that allows my and 1 more machine access only. I usually have a jump server that I use, but I don't want to keep my ssh keys on the server or leave it behind.
[ Parent | on HN ]
Re:Securing a Postgres Database by clan on Friday April 02, 2021 @05:04PM (#26675988)
If the jumpserver is trusted and controlled by you then you should have a look at ssh agent forwarding. Then you avoid leaving keys on the jumphost.
[ Parent | on HN ]
Re:Securing a Postgres Database by ylk on Friday April 02, 2021 @05:12PM (#26676049)
A better alternative would be ProxyJump. See e.g. https://serverfault.com/questions/958222/bastion-server-use-...

Edit: To add some details - using ProxyJump you don’t have to expose anything to the jump host and instead just proxy through it.

[ Parent | on HN ]