5 ms·
> Not sure why the author does not advocate this. Probably because the blog post is an advertisement for their product, which already allows you to implement b
by chatmasta 6y ago
> Not sure why the author does not advocate this.
Probably because the blog post is an advertisement for their product, which already allows you to implement bastion hosts as you describe.
From the bottom:
> Databases do not need to be exposed on the public Internet and can safely operate in air-gapped environments using Teleport’s built-in reverse tunnel subsystem.
- greatjack613 6y agoDid not catch that. Sneaky self promotion there :) Not sure what there reverse tunnel product is, but a bastion host is super easy to implement, just spin up an ec2 and walla. Curious as to what value they are providing
- chatmasta 6y agoThey've been around a while, it actually seems quite cool. Bastion hosts are simple to setup, sure, but Teleport adds a whole bunch of porcelain on top, e.g. integration with SSO, web UI for administration, etc. Haven't used them myself but I wouldn't be against trying it if in the market for something like that.
- duckfang 6y agoI find that porcelain has a very bad time in breaking when you least suspect it. The same is true for server applications that have weird 3rd party dependencies that may go down when you least suspect it.
- jdmichal 6y agoUnsure whether you meant walla, but just in case this is what you meant: It's "voila", from French "et violà". https://www.collinsdictionary.com/dictionary/french-english/et-voil%C3%A0 https://www.collinsdictionary.com/dictionary/french-english/...