WardtermSSH client
EN
Download

Wardterm documentation

Jump hosts and proxies

Reach a server in Wardterm through a chain of jump hosts, the same as ProxyJump, or through a SOCKS5 or HTTP proxy, and forward your SSH agent.

Jump servers

A jump server, or bastion, is a server you pass through to reach others that are not open to the internet.

  1. Add the jump server as a normal server, with its own login.
  2. Open the server you want to reach, choose Show more, then Network and jumps.
  3. Under Jump servers, choose Add a jump server. Add more if you need a chain: the connection goes through them in order, the first one first.
  4. Connect. The app checks the host key of each server in the chain, and signs in to each with its own login.

On a group, the jump servers apply to all its servers. A server can still choose Connect directly, or go back with Use the group's jump servers.

The same chain with OpenSSH:

ssh -J admin@bastion.example.com deploy@10.0.1.20

In an ssh config file it is ProxyJump, which the import reads.

Proxy

  1. Open the server, choose Show more, then Network and jumps.
  2. Under Proxy, choose SOCKS5 or HTTP CONNECT.
  3. Fill in the Proxy address and Port, and a User and Password if the proxy asks for them.
  4. With SOCKS5, turn on Look up names on the proxy when only the proxy's network knows the server's name.

With jump servers, only the first server of the chain goes through the proxy. The same with OpenSSH and a SOCKS5 proxy:

ssh -o ProxyCommand='nc -X 5 -x proxy.example.com:1080 %h %p' deploy@203.0.113.10

Agent forwarding

Agent forwarding lets the server you reach sign in to other servers with your key, while the key stays on your device.

  1. Open the server, choose Show more, then Login, and turn on Agent forwarding.
  2. Under Keys offered, choose Key of this login, or every key on this device.
  3. Keep Ask before each use on to approve each signature.

The same with OpenSSH:

ssh -A deploy@203.0.113.10

More on the agent forwarding page.