Skip to content

Teleport

Secure Access for Infrastructure

teleport diagram

Teleport is an open-source, cloud-native, and multi-platform solution for secure access to infrastructure and applications across distributed environments. Designed to simplify and enhance access controls, Teleport provides a unified gateway for developers and system administrators to securely access servers, containers, databases, and Kubernetes clusters without exposing sensitive credentials or compromising security.

Key Features

  • Zero Trust Access: Teleport implements a zero-trust security model, authenticating and authorizing access requests based on user identity, role, and device trustworthiness, rather than network location or IP address.
  • SSH and Kubernetes Access: Teleport supports secure SSH access to servers and containers, as well as role-based access control (RBAC) and audit logging for Kubernetes clusters, providing a unified access control plane for both traditional and cloud-native environments.
  • Session Recording and Playback: Teleport records SSH and Kubernetes sessions, allowing administrators to audit user activities, monitor commands, and replay sessions for troubleshooting and forensic analysis.
  • Certificate-Based Authentication: Teleport uses short-lived X.509 certificates for authentication and authorization, eliminating the need for long-lived credentials and reducing the attack surface.
  • Audit Logging and Compliance: Teleport generates detailed audit logs of user activities, access requests, and system events, facilitating compliance with regulatory requirements and security best practices.

Getting Started

To get started with Teleport, visit the official website to download and install the software, or deploy it using Docker, Kubernetes, or other containerization platforms. Follow the provided documentation and setup guides to configure Teleport for your infrastructure and integrate it with your existing authentication providers and identity stores.

Community and Support

Join the Teleport community on GitHub to engage with other users, report issues, contribute code, and stay informed about the latest updates and developments. Participate in community discussions, share feedback, and collaborate on improving and enhancing the Teleport secure access solution.

Securely access and manage your infrastructure with Teleport—a cloud-native solution for zero-trust access control and secure remote access.

Volumes

/nfs-nas-swarm/config/
/nfs-nas-swarm/data/

Deployment

No Special requirments

Docker swarm file

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
version: '3.3'
services:
  teleport:
    image: public.ecr.aws/gravitational/teleport:14.3.32
    environment:
      PGID: '911'
      PUID: '911'
      TZ: Europe/Amsterdam
    ports:
     - 3022:3022
     - 3023:3023
     - 3028:3028
     - 3080:3080
    volumes:
     - /swarm/data/teleport:/var/lib/teleport
     - /swarm/config/teleport:/etc/teleport
    networks:
     - librenms_internal
     - internal
     - traefik-public
    logging:
      driver: json-file
    deploy:
      labels:
        traefik.http.routers.teleport-https.tls.certresolver: le
        traefik.http.routers.teleport-https.entrypoints: https
        traefik.http.services.teleport.loadbalancer.server.port: '3080'
        traefik.http.routers.teleport-http.middlewares: https-redirect
        traefik.http.services.teleport.loadbalancer.server.scheme: https
        traefik.http.routers.teleport-https.tls: 'true'
        traefik.http.routers.teleport-http.entrypoints: http
        traefik.http.routers.teleport-http.rule: Host(`teleport.vnerd.nl`)
        traefik.constraint-label: traefik-public
        traefik.http.routers.teleport-https.rule: Host(`teleport.vnerd.nl`)
        traefik.docker.network: traefik-public
        traefik.enable: 'true'
      placement:
        constraints:
         - node.labels.Arch!=i686
         - node.labels.worker==enabled
networks:
  internal:
    driver: overlay
  librenms_internal:
    external: true
  traefik-public:
    external: true

Notes

Comments