ovh/the-bastion

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2177 stars · 133 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

The Bastion is a self-hosted SSH bastion/gateway that acts as the single entry point for operational teams to access infrastructure devices. It provides authentication, fine-grained RBAC authorization, traceability, and auditability including tty recording, with a JSON API over SSH for automation.

Use cases

• secure ssh access to servers through a single entry point
• record ssh sessions for audit and compliance
• manage team access to infrastructure with groups and rbac
• replace ssh jumphosts with a protocol-breaking bastion
• automate account and acl provisioning via a json api over ssh
• delegate access administration to group owners

When to choose

• you need centralized, audited ssh access for ops teams across many servers
• you want fine-grained rbac and delegation of access management
• compliance requires session recording and traceability
• you want infrastructure to trust bastion groups instead of individual users

When to avoid

• you only need a simple ssh jump host without access management or auditing
• your team is small and ssh key distribution is not a pain point
• you need a gui-first access broker rather than a cli/ssh-driven tool

Facets

application · maturity stable

auth authorization security ssh logging monitoring security infrastructure-as-code self-hosted self-hosted cli ssh-bastion jump-host access-management audit rbac tty-recording perl devops linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ovh/the-bastion")