How to reach a server through a bastion — ssh -J

The target has no public address; you hop through a bastion to reach it.

Every flag and config keyword was checked against the OpenSSH 9.6 man pages, and the config examples were parsed for real with ssh -G.

ssh -J user@bastion.example.com deploy@192.0.2.10              # one hop
ssh -J jump1.example.com,jump2.example.com deploy@192.0.2.10    # chained hops, comma-separated
# 192.0.2.x is the documentation range — swap in your real internal address

Good to know

Hops chain with commas. The 192.0.2.x range in the example is the documentation range — swap in your real internal address.

SSH Cheatsheet one-page card — commands that actually work — The full one-page card — SSH Cheatsheet. Get the complete cheatsheet on GitHub