SSH reverse tunnels: a safe baseline (with rollback)
Problem: You need to reach a service on a host behind NAT. A reverse tunnel lets the hidden host dial out to a bastion, exposing its local port only on that bastion. 1) One approved pattern On the hidden host (client), create a reverse tunnel to the bastion. This exposes client’s local SSH on bastion … Read more