Skip to content
SPECIFICTION
Get listed

The Bastion

ovh.github.io

Free plan LinuxAPISelf-hosted
Visit ovh.github.io
Spec score 7.6 #22 of 34 in SSH Server Software

Spec sheet

Purpose
The Bastion is a single entry point for operational teams to securely connect to infrastructure machines, usually over SSH.Read 9 Oct 2026 · ovh.github.io
Intended users
The documentation identifies sysadmins, developers, DevOps, and database administrators as examples of operational teams that use a bastion.Read 9 Oct 2026 · ovh.github.io
Deployment
The installation guide says The Bastion expects to be the only main service running on its server.Read 9 Oct 2026 · ovh.github.io
Integrations
Documented integrations and protocols include MOSH, SCP, the NETCONF SSH subsystem, Yubico PIV keys, and HTTPS proxying.Read 9 Oct 2026 · ovh.github.io
Headquarters
Roubaix, FranceRead 28 Sep 2026 · ovh.github.io
Founded
1999Read 28 Sep 2026 · ovh.github.io
Access controls
It provides personal and group access schemes with delegated group roles.Read 9 Oct 2026 · ovh.github.io
Auditability
Allowed and denied accesses and actions are logged to syslog and/or local SQLite databases.Read 9 Oct 2026 · ovh.github.io
Automation
An optional Puppet module handles configuration and prerequisites.Read 9 Oct 2026 · ovh.github.io
Compliance context
The documentation says the code is used in production in environments certified for PCI-DSS, ISO 27001, SOC1, and SOC2.Read 9 Oct 2026 · ovh.github.io
JSON API
The JSON API interacts with plugins over SSH, using the existing authentication and user isolation mechanisms rather than a separate HTTPS port.Read 9 Oct 2026 · ovh.github.io
Logging
It supports extensive syslog output for SIEM consumption.Read 9 Oct 2026 · ovh.github.io
Protocol break
It breaks the SSH protocol between ingress and egress connections, enabling session recording and access auditability.Read 9 Oct 2026 · ovh.github.io
Security model
The security design uses UNIX discretionary access controls, maps bastion users and groups to system users and groups, and runs code with unprivileged account rights.Read 9 Oct 2026 · ovh.github.io
Session recording
It supports interactive and non-interactive session recording in ttyrec files.Read 9 Oct 2026 · ovh.github.io
Supported operating systems
The guide lists Debian, RockyLinux, Ubuntu LTS, OpenSUSE Leap, and FreeBSD versions tested with each release; FreeBSD has partial MFA support.Read 9 Oct 2026 · ovh.github.io

Plans and prices

The Bastion Free Self-hosted; tested Linux distributions and FreeBSD versions are listed in the installation guide Read 9 Oct 2026 · ovh.github.io

Every The Bastion plan and price →

Where Specifiction places it

Alternatives to The BastionAll alternatives →