Bastion SSH vs DR

Bastion SSH is an SSH and SFTP client built for the way real infrastructure is laid out: not one server you can dial directly, but a bastion, then a machine behind it, then the box you actually wanted. Chains, not just connections: - Reach a host through any number of jump hosts, the way `ssh -J` does - Every hop is a real SSH session, so every machine in the chain is authenticated and its host key checked — not just the first one - Routes are named by where they go: "office-A → mac-mini". Past the first hop addresses stop being unique — a reverse tunnel puts every machine on its jump's localhost — so the path is what tells two otherwise identical routes apart - Add a new jump host inline while you set one up, at any depth - When a chain fails it names the hop, the stage it got to, and the jump it came through, so you can tell a dead tunnel from a machine that is switched off Know what will happen before you connect: - Open a route and see it hop by hop, with what each step will use: a stored key, a stored password, or a prompt - It answers the question up front — "1 of 3 hops will ask for credentials" - Install a public key onto any hop from the same screen Keys that stay on the device: - Generate a key on your phone: the private half goes straight into the system key store and never exists as a file, and only the public key ever leaves - Import the key you already own: OpenSSH format (what ssh-keygen writes by default) or PEM, encrypted or not, with no conversion step - "This device" lists every key with its type, fingerprint, which hosts use it, and whether it was generated here or imported - Use one key across several hosts, and delete a key only after being told how many hosts depend on it Host keys you can verify: - Fingerprints are the OpenSSH SHA256 form, exactly what `ssh-keygen -lf` prints, so you can compare them with the server instead of taking them on trust - A changed host key asks you, every time - Records are kept per route, so two machines that both answer on their bastion's localhost are never confused Multi-session terminal: - Session tabs that live independently — switch, close or retry one without disturbing the rest - xterm-compatible terminal with selection, copy and paste, and resize - Quick keys for the commands and control sequences you keep reaching for - Per-host keep-alive, and reconnection that backs off instead of hammering the server Files: - Browse, download, upload, rename and delete over SFTP - Downloads keep running when you leave the screen, with progress and cancel - Save through the system file picker, or keep them in the app Credentials, on your terms: - A hop's password can be kept in the device key store, per host, and using it needs the device's own check — your face, a fingerprint, or your passcode - One check covers a few minutes of use, then it locks itself again — a found phone is not an open door - Each stored password says which protection it has - A stored password the server rejects is dropped and you are asked again, instead of failing the same way on every attempt - Review and revoke everything that is stored from one screen Yours, and only on your device: - Hosts, keys and known-host records stay on the device. No account, no sync, nothing to sign up for - Private keys live only in the system key store, never as plaintext files - Privacy policy and terms are available from within the app Great for: - Anyone whose servers sit behind a bastion or a reverse tunnel - Sysadmins and developers checking on machines away from a desk - Keeping several sessions open at once — logs in one tab, work in another - Setting up key authentication from a phone, without moving a private key around Open the route. See the hops. Connect.

DR-Terminal turns your iPhone and iPad into a full terminal for every host: SSH, Telnet, SFTP and SCP, a dual-pane file manager, SSH key tools and hardware security keys — servers, routers, switches, embedded boards and Raspberry Pi in a single app. The same app runs on Windows, macOS and Linux. KEY FEATURES: Terminal • Own terminal engine: true color, Unicode and full-screen TUI apps — htop, vim, tmux and mc render as they should • DevOps Keyboard — split terminal keyboard with arrows, modifiers, shortcuts and snippet tiles, adjustable size and opacity • Output highlighting — colorize logs and command output with custom rules • Multiple concurrent sessions with keep-alive in the background • Command history and autocomplete Connections • SSH with password, key, keyboard-interactive and hardware security key authentication • Post-quantum key exchange (sntrup761x25519, mlkem768x25519) • Jump Host (ProxyJump) for multi-hop connections • Quick Connect without saving credentials; connection groups • Automatic server discovery on your local network (Bonjour/mDNS) • Classic Telnet client for network gear and embedded systems Files — SFTP, SCP and the Commander • SCP for hosts without SFTP: OpenWrt, Dropbear and BusyBox routers — Auto picks the transport per host, or pin SFTP or SCP per connection • Dual-pane Commander: local and remote panels side by side; copy, move and delete between any two locations with one tap — server to server too • Open ZIP, TAR and ISO archives in place, even on remote servers, without downloading • Built-in viewer for text, Markdown, images and PDF; copy an image straight to the clipboard • Bookmarks and a default directory per connection • File sharing — send files from other apps straight to a server, over SFTP or SCP Snippets • Parameterized command snippets with typed fields and a live command preview • Built-in catalog of 120+ DevOps commands: packages, services, Docker, network, storage and ZFS • System-aware variants — the detected host OS picks the right tool (apt, dnf, pacman, zypper, brew, pkg, apk) Host Insight • Detected OS, CPU and hardware plus live load, memory, swap and disk gauges in the session sidebar Keys and Security • SSH key generation (Ed25519, ECDSA, RSA) — also directly on a YubiKey over NFC or USB-C • SSH key converter — OpenSSH, PEM, PuTTY PPK, PKCS#1/PKCS#8, DER • FIDO2/YubiKey security keys (Ed25519-SK, ECDSA-SK) over NFC and USB-C • One-tap migration from password to key-based authentication • Host key verification with fingerprint display and trusted hosts management • Encrypted credential storage (iOS Keychain) — no credentials in plaintext • Encrypted configuration backup and restore Customization • Dark, Light, and System theme; 435 terminal color themes; per-connection theme and font size • Built-in documentation in 33 languages PRO (In-App Purchase): • Removes the ads and the welcome screen at launch — every feature above is free, with no connection limits Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/