News for hackers. Stuff that matters.

A comment on Securing a Postgres Database. Parent comment

Re:Securing a Postgres Database by clan on Friday April 02, 2021 @05:04PM (#26675988)
If the jumpserver is trusted and controlled by you then you should have a look at ssh agent forwarding. Then you avoid leaving keys on the jumphost.
[ Parent | on HN ]
Re:Securing a Postgres Database by ylk on Friday April 02, 2021 @05:12PM (#26676049)
A better alternative would be ProxyJump. See e.g. https://serverfault.com/questions/958222/bastion-server-use-...

Edit: To add some details - using ProxyJump you don’t have to expose anything to the jump host and instead just proxy through it.

[ Parent | on HN ]