SSH jump host

An alternative to SSH tunneling to access internal machines trough gateway is using jump hosts.

The idea is to use ProxyCommand to automatically execute ssh command on remote host to jump to the next host and forward all traffic trough.

Prerequisites

 * SSH access to the gateway machine and the internal one
 * Gateway machine has Netcat installed

Dynamic jumphost list
Just concatenate your jumphost(s) and you destination host via the + sign. You don't have to setup a static configuration in your config.

Usage
If usernames on machines differ, specify them:

You can give also port numbers if needed:

It works with scp command, too:

Multiple jumps
The same syntax can be used to make jumps over multiple machines:

Static jumphost list
Static jumphost list means, that you know the jumphost or jumphosts you need, to reach a host. Therefore you can create a static jumphost 'routing' in you .ssh/config. The advantage in comparision to the dynamic jumphost option is, that you don't have to provide the .ssh config on jumphosts between your maschine and all the other jumphosts between you and the final host you want to jump to.

Usage
If usernames on machines differ, specify them by modifing the correspondent ProxyCommand line:

It works with scp command, too:

Multiple jumps
The same syntax can be used to make jumps over multiple machines:

Tips
To ease the connecting even further:
 * Set these commands as shell aliases
 * To avoid typing passwords use OpenSSH keys

Links

 * SSH through jump hosts