Stop your SSH bastion from becoming a single point of failure

Technical Briefing | 7/29/2026

Everyone loves the idea of a bastion host. You lock it down, enable MFA, and route all your traffic through one clean pipe. But then you realize that every time you connect, you are dealing with two hops, persistent connection issues, and a single machine that, if it goes down, effectively bricks your entire infrastructure. It’s not a security architecture; it’s a bottleneck disguised as a gatekeeper.

Ditch the middleman for ephemeral proxying

Instead of relying on a permanent bastion, move toward ProxyJump configurations that treat your jump host as a transient gateway. By using the ProxyJump directive, you can tunnel your session without keeping persistent shell sessions alive on the intermediary. This keeps the load off your gateway and avoids that painful experience where a stale session eats up your connection slots during an outage.

ssh -J user@bastion-a,user@bastion-b target-server

• Avoid permanent session persistence by using -J instead of manual port forwarding
• Configure your client to use the ControlPersist setting to avoid the overhead of re-authenticating for every single multiplexed connection
• Move identity management away from the bastion and into a centralized identity provider via certificate authorities

Why cert-based access beats keys

If you are still managing a fleet of authorized_keys files, you are losing. It is an operational nightmare that guarantees someone will forget to prune access for an ex-employee. SSH certificates let you sign keys with a short TTL, meaning access naturally expires without you needing to play janitor across fifty servers. If you aren’t using an internal CA to sign your sessions, you’re just delaying the inevitable audit failure.

Next time you feel tempted to add another layer of network ACLs to your bastion, take a step back and ask if you are just adding complexity for the sake of feeling secure. Simplify the path, verify the user at the edge, and let the network be a commodity. When the bastion isn’t the primary point of failure, you’ll actually sleep through the night.