A bastion host (also called a jump box) is a single hardened server that sits between the public internet and your private compute network. All SSH sessions to GPU nodes flow through it, enabling audit logging, MFA, and granular access control.
Why we enforce bastion access
- Centralized session recording for compliance.
- Ephemeral SSH certificates issued per login — no long-lived keys.
- Immediate revocation when a laptop is lost or an employee leaves.
Connecting
ssh -J bastion.apetops-us.com your_nodeContact support to enroll your SSH key and receive a bastion passphrase.