Host reachability
The icon on each host that tells you whether an SSH server is answering — before you connect.
Host reachability
Each host in a vault shows a small icon that tells you whether its SSH server is answering, before you try to connect. Hover it for the detail.
What the icon means
| Icon | Meaning |
|---|---|
| Link (green) | Reachable — the address answered and identified itself as an SSH server. The tooltip shows its banner, for example SSH-2.0-OpenSSH_9.6. |
| Triangle (amber) | Answered, but not as an SSH server — usually the wrong port, or another service on it. |
| Broken link (red) | Unreachable — refused, no route, unknown name, or timed out. The tooltip gives the reason. |
| Pulsing grey | Still checking. |
How it checks
The app opens a plain TCP connection to the host's address and port and reads the first line an SSH server sends. It sends no credentials and doesn't start an SSH handshake, so the server's auth log sees at most a dropped connection.
Checks run in the background, a few at a time, and refresh while you're on the page. They never slow down the page or block a connection.
Hosts behind a jump host
For a host reached through a jump chain, only the first hop can be checked from your computer, so the tooltip says Jump host "name" reachable. A green icon there means the bastion answered, not the host behind it.
Tips
- Red, but you can reach the host from a VPN? Connect the VPN, then wait for the next refresh.
- Amber on port 22? Something else may be listening, or SSH runs on another port. Check the host's Port.
- A host with a reachable icon that still fails to connect is usually an authentication or fingerprint problem.