azure-docs icon indicating copy to clipboard operation
azure-docs copied to clipboard

Example for configuring SSH connectivity does not highlight core value add (the "Why") (and needs to start SSHD)

Open DarwinJS opened this issue 1 year ago • 1 comments

I mistook this page as simply configuring regular SSH.

The core value proposition here is a much better security profile by proxing ssh requests through the Azure API so that ports do not need to be opened, azure public IPs & subnets avoided and no security groups to allow ingress of port 22 from the internet or Azure CloudShell - but that is not mentioned at the start. (the "Why")

The az ssh approach should also negate the need to: create a bastion host, create public subnets or create a public IP.

I had done all of that and ended up also opening the SSH port on the client so I could use regular ssh which is also installed in Azure CloudShell.

It would be helpful to outline the security benefits to proxying through the azure client.

Also, because sshd does not start automatically (as mentioned in #108924) my journey becomes a common path - that of assuming the port must be open and a public IP address or bastion subnet must be available.


Document Details

Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

DarwinJS avatar Jun 01 '23 18:06 DarwinJS

@DarwinJS Thanks for your feedback! We will investigate and update as appropriate.

Naveenommi-MSFT avatar Jun 01 '23 18:06 Naveenommi-MSFT

Thanks for your contribution to our documentation

We sincerely apologize for the delayed response. Unfortunately, we have been unable to review this issue in a timely manner. However, we are making overall enhancements to our content. We are closing this issue for now as there has been no activity for a while. If you feel that the problem persists, please respond to this issue with additional information. ? Please continue to provide feedback about the documentation. We appreciate your contributions to our community.

#please-close

akashdubey-ms avatar Feb 12 '24 14:02 akashdubey-ms