<rss xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title>Bastion - Tag - Lorenzo's Blog</title><link>https://www.k8s.it/tags/bastion/</link><description>Bastion - Tag - Lorenzo's Blog</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Tue, 11 Aug 2020 00:00:00 +0000</lastBuildDate><atom:link href="https://www.k8s.it/tags/bastion/" rel="self" type="application/rss+xml"/><item><title>Kubernetes Guacamole — Bastion Host Without MySQL</title><link>https://www.k8s.it/posts/kubernetes-guacamole/</link><pubDate>Tue, 11 Aug 2020 00:00:00 +0000</pubDate><author>Lorenzo Girardi</author><guid>https://www.k8s.it/posts/kubernetes-guacamole/</guid><description><![CDATA[<div class="featured-image">
                <img src="/images/kubernetes-guacamole/guacamole-linux.png" referrerpolicy="no-referrer">
            </div><h2 id="another-guacamole-in-kubernetes">Another Guacamole in Kubernetes</h2>
<p>A bastion host is &ldquo;the only host computer that a company allows to be addressed directly from the public network.&rdquo; It&rsquo;s the security barrier between the internet and your internal infrastructure — the single controlled point for SSH and RDP access.</p>
<p>Apache Guacamole turns a bastion host into a browser-accessible portal: no VPN client, no SSH client, just a browser.</p>
<p>The problem with most Guacamole deployments: MySQL. A database dependency for something that&rsquo;s fundamentally config management.</p>]]></description></item></channel></rss>