Blog

Kubexer Terminal Blog

Practical guides on SSH, bastions, port forwarding, and getting more out of a terminal.

Sep 5, 2026 7 min read

Reaching hosts that only exist behind a bastion

A database host that only resolves inside a private network is not reachable from your laptop, no matter how correct the name is. ProxyJump moves the resolving to the last hop — here is how that works and how the route is stored.

SSHBastionJump Host
Read more
Sep 5, 2026 8 min read

Port forwarding, and what it does not encrypt

The three kinds of SSH forwarding, the detail that makes local forwards useful for unreachable databases, and the honest caveat about the last segment of the path.

SSHPort ForwardingTunnels
Read more
Aug 21, 2026 4 min read

An AI Assistant That Reads Your Terminal — Without Running Anything Behind Your Back

Most terminal AI either lacks context or has too much autonomy. Kubexy reads the session you are actually in, proposes commands, and leaves execution to you.

AITerminalBYOKWorkflow
Read more
Aug 12, 2026 4 min read

Command Snippets: Stop Retyping the Same Twelve Commands

Everyone has a scratch file of commands they paste from. A snippet library with placeholders does the same job without the tab switch — and without running anything unread.

TerminalProductivitySnippetsWorkflow
Read more
Aug 3, 2026 3 min read

SFTP Without Leaving Your Terminal: Browsing Remote Files in the Same Session

Copying a file off a server usually means a second tool, a second authentication, and a rebuilt path by hand. It can just be another tab on the session you already have.

SFTPSSHTerminalFiles
Read more
Jul 22, 2026 5 min read

SSH Host Key Verification: What TOFU Actually Protects You From

Everyone types yes at the SSH fingerprint prompt. Here is what that prompt is actually asking, what it defends against, and how to answer it correctly.

SSHSecurityTerminalHost Keys
Read more
Jul 14, 2026 5 min read

Why SSH Feels Laggy on Long Links — and How Predictive Echo Fixes It

Every keystroke you type over SSH travels to the server and back before you see it. Over a 200 ms link that is genuinely unpleasant. Predictive echo borrows a trick from mosh to fix it.

SSHLatencyTerminalPerformance
Read more
Jul 6, 2026 5 min read

Encrypted SSH Connection Vaults: Keeping Hosts and Keys Out of Plaintext

Most SSH config lives in plaintext on disk. Here is how connection vaults encrypt hosts and identities on device, and how zero-knowledge sync moves them between machines.

SSHSecurityTerminalEncryption
Read more