I wrote a smarter SSH bastion in Rust
https://github.com/warp-tech/warpgate
It's a small self contained Teleport/StrongDM/etc alternative that works with any SSH client and is NOT a jump host (it hijacks your SSH connection and transparently forwards it to the target).
- Set it up in your DMZ, add user accounts and assign them to specific hosts within the network.
- It will record every session for you to replay and review later through a built-in admin web UI.
- Single-file statically linked binary with no dependencies.
- 100% safe Rust.