3 ms·

It's very hard to trust some random new company with your comany's servers. Even if we trust YOU, a single bug that leads to leak your certificate, the keys or

by nif2ee 7y ago

It's very hard to trust some random new company with your comany's servers. Even if we trust YOU, a single bug that leads to leak your certificate, the keys or the stored sessions (which are literally everything! they are literally the company itself) would be a disaster for all your customers, especially when the whole product is managed and closed source. Also Gravitational's Teleport does the same thing and it's FOSS. It's just hard for me to see a serious business that would trust you and proxy their entire SSH sessions through you just for the sake of authentication/authorization while there are many alternative FOSS and more trusted alternatives.

shurco 7y ago
No problems! Use the Enterprise version on your servers.
- nif2ee 7y ago
  Why would I pay $12,000/year for a self-hosted closed source SSH proxy+SSO while Teleport, a FOSS and battle tested alternative exists? Also something like Pritunl can does the same functionality along with a zillion more features while being more scalable and supports any protocol since it's a real VPN while only paying $50/month. UPDATE: It seems also that Cloudflare's Access supports SSH and SSO.
  - shurco 7y ago
    Let me suppose that you do not exactly know the price of 1 sever maintenance provided by Symantec, CyberArk or CheckPoint. The VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes. Teleport is working in another way at all. I understand that you are supporting FOSS and it's very good! I do not exclude the possibility to become a FOSS product one day. The most important thing is that you don't need to install any additional software on the client machine or server!
    - nif2ee 7y ago
      >Symantec, CyberArk or CheckPoint These are huge and public companies and are lots of regulation and scrutiny by the government and investors and are a big target for hackers and adversary governments and that's why they spend a fortune to keep their reputation clean. I don't think you should compare yourself to them. >VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes What other purposes? please enlighten me >The most important thing is that you don't need to install any additional software on the client machine or server so your product works by authenticating uses via your webapp's SSO for example and then the client has to manually download the private keys and certificates and use them with the ssh command?

by nif2ee 7y ago

shurco 7y ago

No problems! Use the Enterprise version on your servers.

nif2ee 7y ago
Why would I pay $12,000/year for a self-hosted closed source SSH proxy+SSO while Teleport, a FOSS and battle tested alternative exists? Also something like Pritunl can does the same functionality along with a zillion more features while being more scalable and supports any protocol since it's a real VPN while only paying $50/month. UPDATE: It seems also that Cloudflare's Access supports SSH and SSO.
- shurco 7y ago
  Let me suppose that you do not exactly know the price of 1 sever maintenance provided by Symantec, CyberArk or CheckPoint. The VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes. Teleport is working in another way at all. I understand that you are supporting FOSS and it's very good! I do not exclude the possibility to become a FOSS product one day. The most important thing is that you don't need to install any additional software on the client machine or server!
  - nif2ee 7y ago
    >Symantec, CyberArk or CheckPoint These are huge and public companies and are lots of regulation and scrutiny by the government and investors and are a big target for hackers and adversary governments and that's why they spend a fortune to keep their reputation clean. I don't think you should compare yourself to them. >VPN or Cloudflare's Access solutions you are talking about, are designed for other purposes What other purposes? please enlighten me >The most important thing is that you don't need to install any additional software on the client machine or server so your product works by authenticating uses via your webapp's SSO for example and then the client has to manually download the private keys and certificates and use them with the ssh command?