The datomic CLI acts as a proxy to the bastion (a.k.a. access gateway). You might need to restart the process when the local internet connection is not stable (your machine goes to sleep, for example).
See the discussion here: https://forum.datomic.com/t/broken-pipe/1391/3