Recently I got myself in a situation where I was working on an OpenStack cluster where my tenant had only a single floating IP available.

I viewed this as a good opportunity to play with bastions and proxies. In this post I'll only deal with the bastion part.

All hosts …