BigForgeKit

Development

SSH Config Builder

Build OpenSSH client configuration blocks, validate options and generate connection commands.

SSH config templates

Start from a common host setup and customize each SSH block.

SSH host 1

Configure connection, identity, proxy and keepalive options.

Custom SSH options

Add less common OpenSSH client settings when required.

No custom options configured.

No configuration issues detected

The current rules did not detect obvious SSH config problems.

Generated SSH config

Copy or download the complete configuration file.

~/.ssh/config
Host production
  HostName 203.0.113.10
  User deploy
  Port 22
  IdentityFile ~/.ssh/production_ed25519
  IdentitiesOnly yes
  ForwardAgent no
  ServerAliveInterval 60
  ServerAliveCountMax 3
  StrictHostKeyChecking accept-new

SSH commands

Use the generated host aliases directly from your terminal.

production

ssh production

SSH configuration is generated locally inside your browser. BigForgeKit does not contact remote servers, open SSH connections or inspect private keys.

About this tool

What is SSH Config Builder?

SSH Config Builder creates reusable OpenSSH client Host blocks for servers, Git providers and bastion-based networks. Configure aliases, identities, proxy jumps and keepalive options while detecting unsafe or invalid settings.

Features

Built for fast developer workflows

  • Create one or more SSH Host blocks.
  • Configure host aliases, hostnames, users and ports.
  • Set IdentityFile and IdentitiesOnly options.
  • Configure ProxyJump for bastion hosts.
  • Configure ServerAliveInterval and ServerAliveCountMax.
  • Enable or disable SSH agent forwarding.
  • Configure StrictHostKeyChecking.
  • Add custom OpenSSH client options.
  • Detect invalid ports and keepalive values.
  • Warn when agent forwarding or host key verification is unsafe.
  • Detect duplicate host aliases.
  • Generate ready-to-use ssh commands.
  • Copy or download the complete SSH config.
  • Generate every configuration locally in your browser.

Frequently asked questions

Questions about SSH Config Builder

Where should I save the generated SSH configuration?

OpenSSH commonly reads user configuration from ~/.ssh/config. Ensure that the file and its parent directory use appropriate permissions.

What is ProxyJump?

ProxyJump connects to a target server through an intermediate SSH host, often called a bastion or jump host.

What does IdentitiesOnly do?

When enabled, SSH uses only explicitly configured identity files instead of trying every key offered by the local agent.

Is ForwardAgent safe?

Agent forwarding can be useful, but a compromised remote host may access the forwarded agent. Enable it only when required.

Should StrictHostKeyChecking be disabled?

Usually no. Disabling host key verification weakens protection against man-in-the-middle attacks. accept-new can be a safer compromise for first connections.

Does the tool connect to remote servers?

No. It only generates configuration text and commands locally in your browser.

Related tools

Continue your workflow