This is an optional offering. Once deployed, users are responsible for its maintenance and updates. Feel free to ask for feedback in the #peer-support channel on EWC RocketChat.
The SSH proxy or SSH bastion is the barrier between your internal machines (without public or floating IPs) and the public internet. With the SSH proxy, you'll have an extra layer of security on top of your VMs. It's equipped with fail2ban, automatic security updates and more.
How to provision the SSH Bastion
If provisioning after October of 2025, we recommend deploying based on the community hub, to benefit form upcoming features or fixes.
Deployment based on the EWC Community Hub
Checkout the corresponding Community Hub Item.
Deployment via Morpheus UI (deprecated)
This method of deployment is deprecated, and kept in documentation only as reference for EUMETSAT tenancies that relied on it prior to October of 2025.
- Go to Provisioning → click Add Button
- Select SSH BASTION
- Fill information for the machine and finalize provisioning
- plan: A eo1.medium (EUMETSAT) or 2cpu-4gbmem-30gbdisk (ECMWF) should suffice.
- network: Select the private network for the tenancy.
- security-groups: ssh.
- public IP: select one available or use external.