« Back to SSH client configuration

SSH ProxyJump option

The ProxyJump defines a bastion host (jump host, jump server, jump box) to use.

Values

ValueMeaning
noneDisable ProxyJump functionality
HOSTDefine the hostname of the bastion host
[USER]HOST[:PORT]Define one or more parameters of the bastion host
URIDefine parameters in URI format

Hostname

Format: hostname

User

Format: user@hostname

Port

Format: hostname:port

Command-line usage

ssh -J bastion destinationsystem

These parameters can also be specified in the format as a URI .

ssh -J ssh://user@hostname:port destinationsystem

Configuration file

While command-line usage is available, typically the settings for a bastion host are stored in your local SSH configuration file.

Host jumphost
   HostName jumphost.example.com

Host webserver
    HostName webserver.example.com
    ProxyJump jumphost

ProxyCommand versus ProxyJump

Before the ProxyJump option was available, jumping was done via the ProxyCommand option.

When both options are set, then the first one available will be used.

Feedback

Small picture of Michael Boelen

This article has been written by our Linux security expert Michael Boelen. With focus on creating high-quality articles and relevant examples, he wants to improve the field of Linux security. No more web full of copy-pasted blog posts.

Discovered outdated information or have a question? Share your thoughts. Thanks for your contribution!

Mastodon icon