How to bake a jump host into your SSH config — ProxyJump

You hop through the same bastion every day and want the hop to happen automatically.

Every flag and config keyword was checked against the OpenSSH 9.6 man pages, and the config examples were parsed for real with ssh -G.

Host bastion
    HostName bastion.example.com
    User ec2-user
    IdentityFile ~/.ssh/id_ed25519

Host internal
    HostName 192.0.2.10
    User deploy
    ProxyJump bastion
ssh internal    # the hop happens automatically —
                # scp / sftp / rsync to "internal" get it for free too

Good to know

Once the hop lives in the alias, scp, sftp and rsync to that host get it for free too.

SSH Cheatsheet one-page card — commands that actually work — The full one-page card — SSH Cheatsheet. Get the complete cheatsheet on GitHub