There's something really broken about my mental model of how ssh's nesting of ProxyCommand works.
I have the following ssh command that works the way I want it to (ssh to jump.mydomain.com and then once I'm on jump.mydomain.com I ssh (using ProxyCommand) to server.remote.com.
ssh -t [email protected] \
ssh -o "ProxyCommand='cloudflared access ssh --hostname %h'" \
I feel like I should be able to set up some rules in my local ~/.ssh/config file so that I can just type
and have these multiple steps "just work", but I can't figure out what those rules should be.
I think my question might be a duplicate of ProxyCommand use for multiple hops and prompt authentication prompt-authentication, but in that question the proxycommands are all being used for simple hops, and my proxycommand doesn't seem to fit into either end of the chain.