SSHPiper on Ubuntu 24.04 LTS by cloudimg
by cloudimg
SSH gateway for ops teams: one public endpoint routing each user to the right internal server.
SSHPiper on Ubuntu 24.04 LTS by cloudimg
SSHPiper is the missing reverse proxy for sshd: a single static Go binary that presents one SSH entry point and routes each incoming connection to an upstream SSH host based on the login username, using a pluggable router. Acting as a bastion, it centralises access to a fleet of backend servers behind one gateway, with per user mapping and no agent or change required on the upstream hosts. This cloudimg image runs sshpiperd under systemd as an unprivileged service on port 2222, leaves the system SSH server on port 22 for administration, and ships a working demo pipe so the reverse proxy is provably routing the moment it boots. Backed by 24/7 expert support.
What is Included
- SSHPiper (sshpiperd), pinned to a specific release and SHA-256 verified, run as the unprivileged sshpiper system user
- The SSH reverse proxy gateway on port 2222, routing each connection to an upstream host by login username via the yaml router
- The system OpenSSH server on port 22 for administration, unchanged
- A working demo pipe generated on first boot (demo to demobackend) that proves the proxy routes and remaps the username
- Every key generated uniquely per VM on first boot, with nothing secret baked into the image
- 24/7 cloudimg support
Getting Started
Deploy from the Azure Marketplace or the Azure CLI, allow ports 22 and 2222, then read the per VM gateway details from /root/sshpiper-credentials.txt and try the demo pipe with ssh -p 2222 -i /root/sshpiper-demo-key demo@127.0.0.1, which lands on the demobackend upstream account. Add your own pipes in /etc/sshpiper/sshpiperd.yaml and restart the service.
Why Choose cloudimg?
- 24/7 Expert Support with guaranteed 24 hour response. Contact support@cloudimg.co.uk
- Production Ready from Launch Pre configured, security patched, and validated before publication
- Azure Native Integration Built with Azure Linux Agent, cloud init, and Gen2 Hyper V
Use Cases
A single SSH entry point in front of many backend hosts, an SSH bastion or jump gateway that routes access by username, and a central control point for auditing and managing SSH connectivity.
Visit www.cloudimg.co.uk/guides/sshpiper-on-ubuntu-24-04-azure for the full user guide.
SSHPiper is licensed under the MIT License (Copyright (c) 2014 Boshi Lian). cloudimg is not affiliated with or endorsed by the SSHPiper project; all trademarks are the property of their respective owners.