HN user

akampjes

13 karma
Posts1
Comments5
View on HN

At a previous job (security company) we had an extensive ~/.ssh/config and would forward anything back through a gateway to get at any internal data.

We were pretty much alway connected to the gateway and would used the SSH SOCKS5 proxy feature to get back to any webapps in development and staging staging webapps, code review etc.

To remove anyone from the system we would simply remove their keys/lock one account on the gateway.

Sometimes a bit annoying having to make sure your SSH connection is up all the time but pretty simple to maintain.

Disks encrypted with Full Disk Encryption of course so no worries when laptops get stolen.