Freedom251 › SSH Server Software
The Bastion
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| The Bastion | Self-hosted; tested Linux distributions and FreeBSD versions are listed in the installation guide | Free |
As ovh.github.io lists them, read 9 Oct 2026. The maker's own page has the final word.
Facts from The Bastion's own pages
- Access controls
- It provides personal and group access schemes with delegated group roles. · ovh.github.io, 9 Oct 2026
- Auditability
- Allowed and denied accesses and actions are logged to syslog and/or local SQLite databases. · ovh.github.io, 9 Oct 2026
- Automation
- An optional Puppet module handles configuration and prerequisites. · ovh.github.io, 9 Oct 2026
- Compliance context
- The documentation says the code is used in production in environments certified for PCI-DSS, ISO 27001, SOC1, and SOC2. · ovh.github.io, 9 Oct 2026
- Deployment
- The installation guide says The Bastion expects to be the only main service running on its server. · ovh.github.io, 9 Oct 2026
- Founded
- 1999 · ovh.github.io, 28 Sept 2026
- Headquarters
- Roubaix, France · ovh.github.io, 28 Sept 2026
- Integrations
- Documented integrations and protocols include MOSH, SCP, the NETCONF SSH subsystem, Yubico PIV keys, and HTTPS proxying. · ovh.github.io, 9 Oct 2026
- Intended users
- The documentation identifies sysadmins, developers, DevOps, and database administrators as examples of operational teams that use a bastion. · ovh.github.io, 9 Oct 2026
- JSON API
- The JSON API interacts with plugins over SSH, using the existing authentication and user isolation mechanisms rather than a separate HTTPS port. · ovh.github.io, 9 Oct 2026
- Logging
- It supports extensive syslog output for SIEM consumption. · ovh.github.io, 9 Oct 2026
- Protocol break
- It breaks the SSH protocol between ingress and egress connections, enabling session recording and access auditability. · ovh.github.io, 9 Oct 2026
- Purpose
- The Bastion is a single entry point for operational teams to securely connect to infrastructure machines, usually over SSH. · ovh.github.io, 9 Oct 2026
- Security model
- The security design uses UNIX discretionary access controls, maps bastion users and groups to system users and groups, and runs code with unprivileged account rights. · ovh.github.io, 9 Oct 2026
- Session recording
- It supports interactive and non-interactive session recording in ttyrec files. · ovh.github.io, 9 Oct 2026
- Supported operating systems
- The guide lists Debian, RockyLinux, Ubuntu LTS, OpenSUSE Leap, and FreeBSD versions tested with each release; FreeBSD has partial MFA support. · ovh.github.io, 9 Oct 2026
Where The Bastion stands on Freedom251
- SSH Server Software#16 of 34