What is a Bastion Host-Awsbloginfo

-

A Bastion Host is a special purpose computer on a host designed and configured to withstand attacks.

  • The computer hosts a single application, for example, a proxy server and all the other services are removed to reduce the threat to the computer.
  • A Bastion host is hardened due to its location and purpose, which is either on the outside of a firewall or demilitarized zone, i.e., public subnet and it usually accesses from untrusted networks or computers.

Architecture of Bastion Host

 Bastion Host

In the above architecture, we have public and private subnet. NAT instance exists behind the security group, and NAT Gateway exists after the security group as NAT instance is configured with the security group while NAT Gateway does not require any security group and it is also redundant. When an instance in a private subnet wants to access the internet, they do so either by NAT instance or NAT Gateway. Now, if we want to administer an environment, what typically happens?. We have got SSH or RDP where SSH is for Linux and RDP is for windows. It is going through internet gateway, router, route table, network ACL, security group, and finally to the Bastion server. Bastion server creates a connection to a private EC2 instance through SSH or RDP. We need to harden the Basten host and harden the Basten host as strong as possible, then we do not have to worry about hardening our instances as long as Bastion host is hardened. Hardening a Bastion host reduces the surface area that we want to harden.

Some Key Points related to Bastion Host

  • Bastion Host is launched in Public subnets and acts as a proxy to the instances in a private subnet.
  • It provides security by reducing the attacks on your infrastructure.
  • A Bastion host is used to to administer EC2 instances using SSH or RDP securely. Bastion hosts are also known as jump boxes in Australia.
  • You cannot use NAT Gateway as a Bastion host. If you SSH or RDP to an instance in a private subnet, you need to configure a Bastion host. You cannot use NAT Gateway.

Comments

Post a Comment

Popular posts from this blog

Amazon Route 53-AWS Blog Info

-
Image
Amazon Route 53  is a highly available and scalable Domain Name System (DNS) web service. It is designed for developers and corporates to route the end users to Internet applications by translating human readable names like  www.mydomain.com , into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other. How to Configure Amazon Route 53? Following are the steps to configure Route 53. Step 1  − Open the Amazon Route 53 console using this link −  https://console.aws.amazon. com/route53/ . Step 2  − Click create hosted zone option on the top left corner of the navigation bar. Step 3  − A form page opens. Provide the required details such as domain name and comments, then click the Create button. Step 4  − Hosted zone for the domain will be created. There will be four DNS endpoints called delegation set and these endpoints must be updated in the domain names Nameserver settings. Step 5  − If it is  godaddy.com  then select domain’s control panel and update the R
Read more

Introduction To Amazon Web services-AWS Blog Info

-
Image
·   AWS stands for  Amazon Web Services . ·   The AWS service is provided by the Amazon that uses distributed IT infrastructure to provide different IT resources available on demand. It provides different services such as infrastructure as a service (IaaS), platform as a service (PaaS) and packaged software as a service (SaaS). ·   Amazon launched AWS, a cloud computing platform to allow the different organizations to take advantage of reliable IT infrastructure. Uses of AWS ·   A small manufacturing organization uses their expertise to expand their business by leaving their IT management to the AWS. ·   A large enterprise spread across the globe can utilize the AWS to deliver the training to the distributed workforce. ·   An architecture consulting company can use AWS to get the high-compute rendering of construction prototype. ·   A media company can use the AWS to provide different types of content such as ebox or audio files to the worldwide files. Pay-As-You-Go B
Read more

What is DNS(Domain name Services)-AWS Blog Info

-
Image
DNS stands for Domain Name System. DNS is used when you use an internet. DNS is used to convert human-friendly domain names (such as  https://www.javatpoint.com ) into an Internet Protocol (IP) address. IP addresses are used by computers to identify each other on the network. IP addresses are of two types,  i.e., Ipv4 and Ipv6. Top Level Domains Domains are seperated by a string of characters seperated by dots. For example,  google.com ,  gmail.com , etc. The last word in a domain name is known as a Top Level Domain. The second word in a domain name is known as a second level domain name. For example: .com:  .com is a top-level domain. .edu:  .edu is a top-level domain. .gov:  .gov is a top-level domain. . co.uk :  .uk is a top-level domain name while .co is a second level domain name. . gov.uk :  .uk is a top-level domain name while .gov is a second level domain name. The Top level domain names are controlled by IANA (Internet Assigned Numbers Authority). IANA is a root zone database
Read more