BASTION HOSTS / PROXYJUMP

Reach private servers through a jump host.

Use a bastion connection when your target server is not directly reachable from your machine, and keep the route associated with the host profile.

Actual ShadeTerm jump-host or bastion connection configuration — Configure a jump host

Bastion / jump-host routePrivate network accessSeparate host context

01 / WHY IT MATTERS

A private server should not need a public SSH port simply because your laptop has to reach it.

ShadeTerm keeps your tools focused on a connection and the task you are doing — rather than adding more windows and manual steps.

01 / FEATURE

Respect network boundaries

A reachable bastion can serve as the SSH entry point to machines on an internal network.

02 / FEATURE

Save the route

Keep the jump-host information attached to the intended target server instead of rebuilding a complex command each session.

03 / FEATURE

Separate credentials thoughtfully

Use appropriate SSH keys and authentication rules for each hop; do not assume the jump host should receive target credentials.

02 / IN PRACTICE

How this fits your server workflow.

Designed around everyday developer tasks, not a dashboard of features you never use.

How the route works

Your SSH client first reaches a bastion host, which relays access to the internal target. The OpenSSH equivalent is ssh -J bastion.example.com user@private-host.

The target stays private; a successful hop still depends on SSH access, name resolution, and network policy from the bastion.

Agent forwarding is a separate choice

SSH agent forwarding can make keys available for authentication beyond the first hop, but it also changes the trust boundary. Use it only when required and only with hosts you trust.

Prefer ProxyJump-style routing and per-hop authentication when possible; avoid broadly enabling agent forwarding for every connection.

03 / WORKFLOW

From connection to result.

A focused sequence you can follow in your own ShadeTerm workspace.

01 / STEP

Set the bastion

Specify the reachable jump host.

02 / STEP

Set the target

Choose the private destination and its credentials.

03 / STEP

Connect through

Establish the route and verify the final host identity.

04 / DETAILS

Common questions.

Practical limitations and useful details before you get started.

What is a jump host?

A jump host (bastion) is an SSH-accessible machine used as an entry point to another host, often on a private network.

Does a jump host require exposing the target publicly?

No. The private target needs to be reachable from the bastion, not necessarily from the public internet.

Should I turn on agent forwarding?

Only if necessary. Agent forwarding has security implications and is not required for every ProxyJump workflow.

ShadeTerm / WINDOWS

Work with your server, not around your tools.

Terminal, files, code and more — organized around your SSH connections.

Try ShadeTerm