[olasd]

With recent enough SSH (> 5.4), SSH tunnels can be achieved with

  Host <alias>
    HostName <ip>
    ProxyCommand ssh -W %h:%p <bastion host>

Which doesn't require nc (or anything else) installed on the bastion host.