None of these features are supported by openssh without external code. You can manually sign certs for users and hosts with ssh-keygen but there's no distribut

None of these features are supported by openssh without external code. You can manually sign certs for users and hosts with ssh-keygen but there's no distribution or automation included with openssh. There's a half dozen SSH CA solutions around for this, but none as polished as what teleport has. Teleport's session logging is unrivaled by anything you can do with openssh and is one of the key reasons I'm looking to adopt it. The reverse tunnel mode could be accomplished with autossh to manage a reverse tunnel, but that's also not out of the box.