SSH bastion server on Azure #

An SSH bastion server on Azure enables you to connect Starburst Galaxy to a database on Azure with an SSH tunnel. This allows you to create a catalog for a database that is not publicly available.

Database configuration #

tbd

Bastion server #

You can create a suitable bastion server on Azure with the following configuration.

The recommended setup for the security group is to allow SSH connections only from the specific IP address range/CIDR of Starburst Galaxy. This information is available when you configure the SSH tunnel with a locked down bastion host and use Validate and save SSH tunnel. The connection attempt fails and the correct range is displayed. Use the information to update the security group for the bastion host, and rerun the validation.