Bastion Playbook

ansible.cfg

[ssh_connection]
ssh_args = -F ssh.cfg
control_path = ~/.ssh/mux-%r@%h:%p

hosts

[bastion]
54.171.0.0

[app_servers]
172.16.1.1
172.16.2.1

ssh.cfg

Host 172.16.*
  ProxyCommand           ssh -W %h:%p ubuntu@54.171.0.0

Host *
  ControlMaster          auto
  ControlPath            ~/.ssh/mux-%r@%h:%p
  ControlPersist         15m