bless
the-bastion
| bless | the-bastion | |
|---|---|---|
| 6 | 5 | |
| 2,729 | 1,424 | |
| 0.2% | 2.0% | |
| 0.0 | 8.7 | |
| 9 months ago | 19 days ago | |
| Python | Perl | |
| Apache License 2.0 | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
bless
-
What are SSH Certificate Authority solutions?
In the quick search I learned about ssh cert authority which looks very manual and also like a dead project smallstep's step-ca who put together very nice article about how to begin certificate authority process Netflix' BLESS is AWS only Cashier which also looks quite ok
-
What is the best way to manage SSH identities and access on scale?
NETFLIX BLESS - Bastion's Lambda Ephemeral SSH Service
- Has anyone here heard of the term “infrastructure access platform” or StrongDm or Teleport?
- Cryptojacking Attacks Continue To Target SSH Servers
- How often should I rotate my SSH keys?
-
Why SSH certificates are awesome
3. BLESS - By Netflix
the-bastion
-
SSH With SSO
My company developed its own open source solution for that: https://github.com/ovh/the-bastion
-
Best jumphost software?
GitHub: https://ovh.github.io/the-bastion/
-
Internet access control and logging for each user on a multiuser remote access linux server
You can setup something like The Bastion https://github.com/ovh/the-bastion on some intermediate host. And your untrusted users will be connecting through it to your server. You will have their full tty session logged.
- Show HN: Automatic proxy setup for SSH'able boxes that have no network access
-
OVH NetSec Setup
I don’t know if that would fall into what you’re looking for: https://github.com/ovh/the-bastion
What are some alternatives?
certificates - 🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Gravitational Teleport - The easiest, and most secure way to access and protect all of your infrastructure.
cashier - A self-service CA for OpenSSH
sshportal - :tophat: simple, fun and transparent SSH (and telnet) bastion server
openssh-sk-winhello - A helper for OpenSSH to interact with FIDO2 and U2F security keys through native Windows Hello API
fwknop - Single Packet Authorization > Port Knocking
keymaster - Short term certificate based identity system (ssh/x509 ca + openidc)
postgresqltuner - Simple script to analyse your PostgreSQL database configuration, and give tuning advice
streamalert - StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.
Cluster SSH - Cluster SSH - Cluster Admin Via SSH
sekey - Use Touch ID / Secure Enclave for SSH Authentication!
warpgate - Smart SSH, HTTPS and MySQL bastion that requires no additional client-side software