ProxyJump (-J) chains connections: it opens an SSH session to bastion.example.com and tunnels through it to the destination, so the target only ever sees the bastion's IP. This is the standard way to reach servers on private networks without agent forwarding. Multiple jumps can be comma-separated.
Looking for more? Search all 7,657 commands — works offline, in English or Spanish, and fixes typos.