Bastion / Jump Host
Problem
Administrators need SSH/RDP access to private servers.
Giving every private server a public IP exposes a large attack surface.
Solution — Bastion
Provide a controlled administrative entry point.
Admin ↓ Bastion ↓ Private servers
Core idea: a bastion centralizes administrative access instead of exposing every server directly.