Bastion/Jumpbox Server
Hi Everyone,
I’m looking for some perspective and practical suggestions from the community.
We’re currently managing 200+ servers and use a jumpbox as the primary access point. I’d be interested to hear how others approach server management at this scale, particularly around auditing staff access and controlling privileged (root) access.
I’ve already looked at options such as Vauban, FreeIPA, LDAP-based solutions, PAM, and similar tools. I’m not searching for a ready-made drop-in replacement, but rather guidance and real-world approaches that others have found effective.
With the growing relevance of AI-driven threats and the shift toward Zero Trust models, securing root access and maintaining responsible operational practices feels increasingly important.
Any insights, architecture patterns, or lessons learned would be greatly appreciated.