Bastion SSH vs OpenWRT Manager

Bastion SSH is an SSH and SFTP client built for the way real infrastructure is laid out: not one server you can dial directly, but a bastion, then a machine behind it, then the box you actually wanted. Chains, not just connections: - Reach a host through any number of jump hosts, the way `ssh -J` does - Every hop is a real SSH session, so every machine in the chain is authenticated and its host key checked — not just the first one - Routes are named by where they go: "office-A → mac-mini". Past the first hop addresses stop being unique — a reverse tunnel puts every machine on its jump's localhost — so the path is what tells two otherwise identical routes apart - Add a new jump host inline while you set one up, at any depth - When a chain fails it names the hop, the stage it got to, and the jump it came through, so you can tell a dead tunnel from a machine that is switched off Know what will happen before you connect: - Open a route and see it hop by hop, with what each step will use: a stored key, a stored password, or a prompt - It answers the question up front — "1 of 3 hops will ask for credentials" - Install a public key onto any hop from the same screen Keys that stay on the device: - Generate a key on your phone: the private half goes straight into the system key store and never exists as a file, and only the public key ever leaves - Import the key you already own: OpenSSH format (what ssh-keygen writes by default) or PEM, encrypted or not, with no conversion step - "This device" lists every key with its type, fingerprint, which hosts use it, and whether it was generated here or imported - Use one key across several hosts, and delete a key only after being told how many hosts depend on it Host keys you can verify: - Fingerprints are the OpenSSH SHA256 form, exactly what `ssh-keygen -lf` prints, so you can compare them with the server instead of taking them on trust - A changed host key asks you, every time - Records are kept per route, so two machines that both answer on their bastion's localhost are never confused Multi-session terminal: - Session tabs that live independently — switch, close or retry one without disturbing the rest - xterm-compatible terminal with selection, copy and paste, and resize - Quick keys for the commands and control sequences you keep reaching for - Per-host keep-alive, and reconnection that backs off instead of hammering the server Files: - Browse, download, upload, rename and delete over SFTP - Downloads keep running when you leave the screen, with progress and cancel - Save through the system file picker, or keep them in the app Credentials, on your terms: - A hop's password can be kept in the device key store, per host, and using it needs the device's own check — your face, a fingerprint, or your passcode - One check covers a few minutes of use, then it locks itself again — a found phone is not an open door - Each stored password says which protection it has - A stored password the server rejects is dropped and you are asked again, instead of failing the same way on every attempt - Review and revoke everything that is stored from one screen Yours, and only on your device: - Hosts, keys and known-host records stay on the device. No account, no sync, nothing to sign up for - Private keys live only in the system key store, never as plaintext files - Privacy policy and terms are available from within the app Great for: - Anyone whose servers sit behind a bastion or a reverse tunnel - Sysadmins and developers checking on machines away from a desk - Keeping several sessions open at once — logs in one tab, work in another - Setting up key authentication from a phone, without moving a private key around Open the route. See the hops. Connect.

Take full control of your OpenWrt router from your iPhone — at home or away. OpenWrt Manager is a native iOS app for home network admins, parents and power users who want to see and control every device on their network, from the couch or from the other side of the world. Remote Access, Built In • Reach your router from anywhere through Cloudflare Tunnel, Tailscale or WireGuard • One-tap install and setup on the router: paste a tunnel token, sign in to Tailscale, or create a WireGuard server and share peer configs by QR code • See every remote-access method on one page with its live status, and switch any of them off in a tap • Save Cloudflare Access service tokens once and pick them for any router Smart Notifications • Instant alerts when an unknown device joins your network, even when the app is closed • Arrival / departure alerts for the people you care about, and traffic alerts for heavy users • Notifications in your language, with no duplicates Every Device on Your Network • Live list with name, IP, MAC, vendor, connection type, online time and current speed • Sort and filter by group, access state, Wi-Fi or wired, and more • Family, Guest, IoT, Work or custom groups; nicknames; static IP leases • Live and cumulative traffic per device, kept across router reboots • Wake-on-LAN Parental Controls & Access • Block a device, or allow it on the local network only, in one tap • Block unknown devices: only devices you have allowed get internet • Per-device speed limits and hourly or daily data quotas • Schedules for the whole home's internet and for single devices (e.g. consoles off 9 PM–7 AM on school nights) • One switch to pause the whole home's internet Wi-Fi • Turn networks on or off, change the name, password, security, channel and power • Guest Wi-Fi in a tap • Share any network as a QR code Dashboard & Tools • CPU, memory, storage, uptime and firmware at a glance • Live bandwidth chart, WAN details, and every interface with its traffic and link speed • Speed test run on the router itself • Ping, DNS lookup, WAN check and system log • Reboot, restart network or Wi-Fi, reload the firewall • Configuration backup and restore • Firmware and package update checks • Network settings: WAN / LAN, DHCP, PPPoE, DNS, IPv6, port forwarding Easy Setup • One-tap router setup over SSH, with a clear list of what will be changed • Works with OpenWrt 23.05 and later, including 25.12 (opkg and apk) • Clear, translated error messages, with technical details one tap away Privacy First • No account, no sign-up, no analytics, no ads, no third-party SDKs • The app talks to your router directly or through the remote-access service you set up yourself; your traffic never passes through our servers • Optional push notifications use our own minimal backend (Cloudflare Worker → APNs), receiving only your push token, language and device-join events. Turn them off any time • Passwords and tokens are stored in the iOS Keychain • Full details in our Privacy Policy Terms of Use: https://openwrt.yzinf.com/term Privacy Policy: https://openwrt.yzinf.com/privacy