SSH & Remote Administration

Fix your SSH jumping without needing to re-login every hop

🧩 The Challenge

Setting up multi-hop jumps to reach a deep production box is a massive headache when you have to re-enter your MFA token at every single relay. I wasted a whole morning manually chaining these because nobody told me there was a better way to handle the traffic.

💡 The Fix

Use SSH Agent Forwarding alongside ProxyJump to blast through your bastion hosts without re-authenticating at every layer of the network. This keeps your credentials local and transparently tunnels the connection.

ssh -A -J user@bastion-1,user@bastion-2 user@target-host

⚙️ Why It Works

Agent forwarding passes your local SSH key signature through the tunnel, while ProxyJump handles the underlying socket connection for all the intermediate steps in one go. You’re effectively building a tunnel through the middle boxes instead of hopping onto them individually.

🚀 Pro-Tip: Put your proxy settings in your .ssh/config file and save your fingers the trouble of typing them out forever.

Linux Tips & Tricks | © ngelinux.com | 9/26/2026