Reach a server that only the bastion can see
Reach a server through one bastion or several. Each hop signs in and checks its host key on its own.
Everything rides the route
Terminal, SFTP, Docker, forwarding, and monitoring all take the same route.
- Set it once on the machine.
Details
Each hop, its own machine
Each hop has its own port, user, and sign-in. If one fails, SwiftServer tells you which.
Built in the app
Build the route in the app, and it works on iPhone as it does at a desk.
One Identity, every bastion
Save a bastion login once as an Identity. Rotating a key is one edit.
Synced
Routes and their trusted host keys sync through iCloud.
Setting up a route
- 01
Open the target machine
The jump settings live on the machine you are trying to reach.
- 02
Turn on Use Jump Host
The route appears, with your device at the top and the destination at the bottom.
- 03
Add the first hop
Host, port, user, and its credentials. An Identity works here, so one saved credential can cover every bastion.
- 04
Add more hops if you need them
Hops run in the order shown. Move them up and down until the chain matches your network.
- 05
Connect
SwiftServer works through the bastions one at a time, then hands you the shell on the target.
Questions
What is a jump host?
A jump host, also called a bastion, is a machine you are allowed to reach from outside that can in turn reach machines on a private network. Your SSH connection is tunneled through it on the way to the target.
How many hops can a route have?
As many as the path needs. The route is an ordered list you edit, and SwiftServer rejects a route that loops back on itself.
Does SwiftServer read ProxyJump from my ~/.ssh/config?
No. Routes are set up in the app and sync through your iCloud. There is no OpenSSH config import.
Does monitoring work through a jump host?
Yes, with one exception. If a hop asks for something to be typed in, dashboard status is switched off for that machine, because a background refresh has nobody to answer the prompt.
Do jump hosts cost extra?
Yes. Jump hosts are part of Premium. The terminal, Mosh, SFTP, snippets, and monitoring three servers are free.
Is a jump host the same as a connection proxy?
No. A jump host is an SSH server you tunnel through. A connection proxy is a SOCKS5 or HTTP CONNECT proxy that carries the first leg of the connection. You can use both, and the proxy comes first.
Two bastions deep, from a phone.
Jump hosts are part of Premium.