1

From what I read, I understood that both the bastion host and the dual homed host are special computers that act as a link between the local network and the internet, so what is the difference between them?

3
  • A dual-homed host can be anything with 2 active network interfaces, whether meant to protect networks or not. A Bastion host is one with protection as a purpose.
    – schroeder
    Commented Mar 19, 2020 at 16:46
  • Potential duplicate: security.stackexchange.com/questions/146891/…
    – schroeder
    Commented Mar 19, 2020 at 16:46
  • Not really. I've already seen that question before asking this one. I could understand the Screened Host well, my problem is understanding the difference between bastion host and dual homed host, since they seem to behave the same way topologically-wise.
    – Daniel
    Commented Mar 19, 2020 at 19:00

1 Answer 1

2

Your question is a bit like asking what's the difference between a defense counsel and an attorney. An attorney is a person who has studied law and is licensed to practice it; defense counsel is the role an attorney can play in a specific trial.

"Dual-homed" describes the networking configuration of a host that has interfaces in two networks. "Bastion" describes the role it plays: provide safe, controlled external access to resources in one of those networks to authorized clients in the other.

3
  • So you are saying a dual-homed host can act as a Bastion? When I studied them, they were separated and seemed like two different defensive mechanisms. This explanation makes sense.
    – Daniel
    Commented Mar 19, 2020 at 21:51
  • No. A bastion is usually has a presence on at least 2 networks - but its purpose is specifically to control access access between those networks and it has been hardened to do so. A dual-homed host simply has a presence in more than one network,
    – symcbean
    Commented Mar 19, 2020 at 22:26
  • @symcbean and not only that, a dual-homed host can be on the same network
    – schroeder
    Commented Mar 20, 2020 at 7:49

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .