Drawbridge – Bastion/Jump host tunnelling management

by analogj • 8 years ago

2 1 8 years ago

analogj• 8 years ago

A while back I made a reddit post asking for help finding a tool that would manage/generate ssh config files for all our jump/bastion hosts.

There was some interest (and great discussion), however no-one submitted a tool that solved the actual problem.

Since that post, I've worked on an open source tool that implents the features of our closed source application. Its available now on github: https://github.com/AnalogJ/drawbridge

Here are some of its features:

  - Single binary (available for macOS and linux), only depends on `ssh`, `ssh-agent` and `scp`
  - Uses customizable templates to ensure that Drawbridge can be used by any organization, in any configuraton
  - Helps organize your SSH config files and PEM files
  - Generates SSH Config files for your servers spread across multiple environments and stacks.
	- multiple ssh users/keypairs
	- multiple environments
	- multiple stacks per environment
	- etc..
  - Can be used to SSH directly into an internal node, routing though bastion, leveraging SSH-Agent
  - Able to download files from internal hosts (through the jump/bastion host) using SCP syntax
  - Supports HTTP proxy to access internal stack urls.
  - Lists all managed config files in a heirarchy that makes sense to your organization
  - Custom templated files can be automatically generated when a new SSH config is created.
	- eg. Chef knife.rb configs, Pac/Proxy files, etc.
  - Cleanup utility is built-in
  - `drawbridge update` lets you update the binary inplace.
  - Pretty colors. The CLI is all colorized to make it easy to skim for errors/warnings

---

You can read more & download it from Github: https://github.com/AnalogJ/drawbridge

I'm always open to PR's and feature requests. I'd also love to hear any feedback you guys may have.

Drawbridge – Bastion/Jump host tunnelling management

Related Stories