How to make balena connecting to devices behind a bastion

Hi everyone!

I am about to bring in production a project that will make use of balena.
The devices (RaspberryPi 4) will be connected to a network and they normally can be reached just if passing through a bastion first by using ProxyCommand ssh my-bastion -W %h:%p in my ssh config. Is it possible to configure balena’s server to easily reach the devices in the network?

Thanks :slight_smile:


If I understand correctly, you would like to ensure that you can ssh into your devices from outside of the network?
If so, there is no need to open external ports, as long as your device has access to outgoing ports 443, 123 and 53. You can read more details in our networking requirements document: Network Setup on balenaOS 2.x - Balena Documentation