This page is good: http://gravitational.com/teleport/docs/architecture/ http://gravitational.com/teleport/docs/architecture/ The proxy accepts two incoming con

This page is good: http://gravitational.com/teleport/docs/architecture/ http://gravitational.com/teleport/docs/architecture/ The proxy accepts two incoming connections: from your server and from the client, then it bridges them and allows the client to negotiate an SSH handshake with the server.