[Osaka/Yokohama/Tokushima] Looking for infrastructure/server side engineers!

[Deployed by over 500 companies] AWS construction, operation, maintenance, and monitoring services

[Successor to CentOS] AlmaLinux OS server construction/migration service

[For WordPress only] Cloud server “Web Speed”

[Cheap] Website security automatic diagnosis “Quick Scanner”

[Reservation system development] EDISONE customization development service

[Registration of 100 URLs is 0 yen] Website monitoring service “Appmill”

[Compatible with over 200 countries] Global eSIM “Beyond SIM”

[If you are traveling, business trip, or stationed in China] Chinese SIM service “Choco SIM”

[Global exclusive service] Beyond's MSP in North America and China

[YouTube] Beyond official channel “Biyomaru Channel”

How to connect to SCP using WinSCP via a springboard server

2016.01.23

Server construction/operation

table of contents

1 session part
2 tunnel
3 certification
4 connect

My name is Ito and I am an infrastructure engineer.
In recent server configurations, there are many environments in which connections are made to the server via a stepping stone server in order to increase the security level.

It has a configuration like this.
SnapCrab_NoName_2016-1-19_11-0-39_No-00-min
The configuration is such that end users can only access the web server via http, and developers who set up the servers can connect to each server via SSH via a springboard server.

I think SCP is often used when uploading content, but
in a configuration where a stepping stone server exists, it is not possible to connect to the target server using SSH or FTP.

So, WinSCP via a springboard server.

session part

This is the part to enter on the screen started by WinSCP.

winscp1

Transfer protocol	SCP
host name	local IP address
port number	22
username	Username of the server to connect to via bastion
password	Password for the server you connect to via the springboard

tunnel

Configure the connection to the springboard server in [Settings] - [Connection] - [Tunnel].

winscp2

Connect via SSH tunnel	check
host name	Host name or IP address of the stepping stone server
port number	22
username	Username to connect to the bastion server
password	Password to connect to the springboard server
local tunnel port	automatic selection
private key	Private key (.ppk) required to connect to the springboard server

(The private key is required if the end server is a key connection)

certification

Set the authentication conditions in [Settings] – [SSH] – [Authentication].

It is OK if you make the following settings in "Authentication conditions" in the middle.

Check "Allow agent transfer"
Select the private key from earlier

connect

When you connect with the above settings, you will be asked to enter the passphrase for your private key.
You will be asked twice to log in to the base server and from there to the end server.

winscp3