comparison .ssh/config @ 299:283c6f6c64c5

And start treating parapet like the bastion it is
author Steve Huston <huston@princeton.edu>
date Mon, 14 Apr 2025 15:41:32 -0400
parents a4bf322037a6
children 95129e7fb0ac
comparison
equal deleted inserted replaced
298:ef0a1a087499 299:283c6f6c64c5
16 Ciphers +3des-cbc 16 Ciphers +3des-cbc
17 17
18 # If we're not on the Princeton wired network, csesbh2 should proxy through 18 # If we're not on the Princeton wired network, csesbh2 should proxy through
19 # xanadu 19 # xanadu
20 Match host csesbh2.princeton.edu exec "~/.ssh/onsubnet --not 128.112." 20 Match host csesbh2.princeton.edu exec "~/.ssh/onsubnet --not 128.112."
21 ProxyJump xanadu.astro.princeton.edu
22
23 # Likewise, td-parapet connections should proxy through xanadu
24 Match host td-parapet.princeton.edu exec "~/.ssh/onsubnet --not 128.112."
21 ProxyJump xanadu.astro.princeton.edu 25 ProxyJump xanadu.astro.princeton.edu
22 26
23 # If we're not on Princeton wired network, and not at home, then connections 27 # If we're not on Princeton wired network, and not at home, then connections
24 # to joshua should tunnel through xanadu 28 # to joshua should tunnel through xanadu
25 Match host joshua.srhuston.net exec "~/.ssh/onsubnet --not 128.112. && ~/.ssh/athome --not" 29 Match host joshua.srhuston.net exec "~/.ssh/onsubnet --not 128.112. && ~/.ssh/athome --not"