Secure Multi-Environment Networking
CATable is designed for complex cloud topologies where database clusters reside in isolated private subnets behind VPC jump hosts or bastion gateways.
1. SSH Bastion Tunneling
Route database traffic securely through an intermediate SSH bastion without needing external port-forwarding daemons:
- Supports password, encrypted private key (Ed25519, RSA), and ssh-agent authentication.
- Automatic reconnect and keep-alive heartbeats over unstable cellular or VPN links.
- Integrated host fingerprint verification (TOFU) preventing Man-in-the-Middle attacks.
2. SSL/TLS Certificate Verification
Enforce strict transport layer security with custom Certificate Authority (CA) root bundles, client certificates, and client keys:
SSL Mode: verify-full
CA Certificate: ~/.certs/ca-root.crt
Client Certificate: ~/.certs/client-identity.crt
Client Key: ~/.certs/client-identity.key3. Environment Tagging & Coloring
Assign visual cues to connections to avoid costly mistakes:
- Production: Red ribbon, mandatory confirmation on updates, auto-commit disabled by default.
- Staging: Amber ribbon, auto-rollback query warnings.
- Development / Local: Green ribbon, permissive execution with instant undo buffers.