If you decide to use a bastion host, why not use a security-focused OS like Open... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		avidphantasm on Jan 13, 2022 \| parent \| context \| favorite \| on: SSH Bastion Host Best Practices If you decide to use a bastion host, why not use a security-focused OS like OpenBSD?

teloli on Jan 14, 2022 | [–]

If you’re using - say - Debian all over your infra, introducing a whole new OS just for the bastions increases complexity without bringing any significant advantage.

0xdeadb00f on Jan 14, 2022 | [–]

It genuinely seems like the perfect OS for this. Install minimal sets, disable some unnecessary default services, and viola..

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact