Bastion Host

The goal of this project is to learn and practice how to set up a **bastion host**—a secure entry point that enables authorized users to access private infrastructure or internal systems without exposing them to the public internet.

1. Choose a cloud provider (e.g., AWS, DigitalOcean, GCP, Azure) and create **two servers**:- **Bastion Host** (publicly accessible). - **Private Server** (accessible only from the bastion host IP address and not publicly).
2. Configure both the servers to allow SSH connection and configure SSH in a way that you can SSH into the private server by jumping through the bastion host```bash Host bastion HostName <bastion-ip> User <bastion-user> IdentityFile <path-to-bastion-private-key> Host private-server HostName <private-server-ip> User <private-server-user> ProxyJump bastion IdentityFile <path-to-private-server-private-key> ```
3. Connect to the bastion host using:```bash ssh bastion ```
4. From the bastion host, connect to the private server:```bash ssh private-server ```
5. Alternatively, connect directly using your local machine:```bash ssh private-server ```
6. Optionally set up basic monitoring for SSH access attempts using tools like `fail2ban` for example.