Posts

OCI Bastion and jump-host build with DRG using terraform code

Image
  Overview   BASTION Provide restricted and time-limited secure access to resources that don not have public endpoints and require strict resource access controls. Examples include compute instances, bare metal and virtual machines, MySQL, ATP, OKE, and any other resource that allows Secure Shell Protocol (SSH) access. For more details see oci bastion documentation OCI Bastion removes the need for a public IP for bastion access, eliminating the hassle and potential attack surface from remote access. See bastion concept using Transit routing in figure 1.0.   Figure1.0:     SESSION The Bastion service recognizes three types of sessions. The type of session you create, or choose to connect to, depends on the type of target resource. Recommended to use ssh port forwarding session. For more details see: link     Overview of Dynamic Routing Gateways and remote VCN peering A DRG acts as a virtual ...