SSH Gateway & Secure Remote Access

Unified SSH Access Point

All project virtual machines are reachable via a single SSH proxy entrypoint at msrv.space:

microsrv:~$ ssh -A <vm-name>@msrv.space

Authentication Lifecycle:

1. The SSH Gateway verifies your local SSH signature against the public keys registered in your project profile.
2. It transparently proxies the SSH stream to the target VM using its internal VPC hostname.
3. An interactive shell session is established as the ubuntu system user.

Local Port Forwarding (SSH Tunneling)

You can securely tunnel local workstation ports to internal VPC services through the gateway:

# Tunnel local port 5432 to PostgreSQL (5432) on VM db-primary
microsrv:~$ ssh -A -L 5432:10.42.0.15:5432 db-primary@msrv.space

You can now connect your local database client directly to localhost:5432.

SSH Config Optimization (~/.ssh/config)

Streamline your daily workflow by adding a configuration pattern to ~/.ssh/config:

Host *.msrv
    HostName msrv.space
    User %h
    ForwardAgent yes

Connect instantly to any instance using shorthand syntax:

microsrv:~$ ssh demo-web.msrv