2026-11-15 –, Workshop Room #9#
You already know how to generate keys and authenticate securely. But SSH can do so much more. In this advanced workshop, we'll explore the powerful features that transform SSH from a simple login tool into an essential part of your workflow—port forwarding, proxy jumping, SSH certificates, control channel reuse, and crafting bulletproof ssh_config files. Walk out with the techniques that turn SSH from a necessity into a superpower.
Many SSH users hit the same frustrations: managing dozens of hosts with repetitive parameters, struggling with multi-hop networks, or wasting time on repeated connection overhead. This workshop directly addresses these pain points.
We'll start by diagnosing the problems in a typical ssh_config, then systematically solve them through five core techniques:
Port Forwarding — Local and remote variants for securely accessing databases on private networks and exposing local services to remote machines. You'll understand when to use each and why it matters for security.
Proxy Jumping — Build practical multi-hop scenarios (2-3 hops) and see how ProxyJump eliminates the bastion-host dance.
SSH Certificates — A game-changer for teams managing multiple servers. We'll cover generation, deployment, and why they're superior to key-per-host approaches.
Control Channel Reuse — Understand connection multiplexing and how ControlMaster/ControlPath cuts SSH connection overhead dramatically.
ssh_config Mastery — Build a comprehensive config from scratch using Host patterns, wildcard matching, conditional includes, and automation that grows with your infrastructure.
By the end, you'll have working examples you can adapt immediately.
Anything with IP networking, basically. Plus automation and some software development.