-
Sep 16, 2021 Anatomy of a Cloud Infrastructure Attack via a Pull Request
In this blog post we’ll explain how an attacker can get access into a cloud environment by sending a malicious pull request.
security engineering -
Sep 10, 2021 Security Incident Containment with Teleport Session and Identity Locking
We are thrilled to announce the general availability of Session and Identity Locking feature that allows quick incident containment.
security announcements -
Sep 8, 2021 Expert Advice on Starting a Career in Cybersecurity
Do you want to become a cybersecurity expert but don’t know where to start? We have interviewed several computer security professionals and here’s what we’ve learned.
security -
Sep 2, 2021 Why Secure Access to Cloud Infrastructure is Painful
Secure remote access to cloud infrastructure is painful. Access Plane technology allows consolidating access in one place.
teleport security engineering -
Aug 31, 2021 Introduction to HSM - Hardware Security Modules
In this blog post we explain how hardware security modules (HSM) help protect sensitive data and how Teleport 7.2 uses HSM to make remote access more secure.
teleport security -
Aug 26, 2021 Using Datalog to Test for Access
Utilizing the power of Datalog and logic programming to answer difficult access-related questions.
ssh teleport security databases -
Aug 23, 2021 Okta Directory Security Hardening using Terraform
The guide for Okta Directory security hardening using Terraform
security -
Aug 20, 2021 What Makes Teleport a Great Place to Work
Teleport has been officially certified by Great Place to Work. This prestigious certification is based entirely on feedback from current employees
teleport announcements -
Aug 18, 2021 Teleport 7.0 Brings Identity-Based Access to MongoDB
Announcing the release of Teleport 7.0 which brings support for MongoDB. Users of MongoDB can now enjoy consolidated identity-based secure access to all of their MongoDB instances across all environments.
security announcements mongodb -
Aug 18, 2021 Teleport Raises $30MM Series B and Expands its Access Plane Technology with MongoDB Support
Today we are announcing a new funding round led by S28 Capital and Kleiner Perkins. The new capital will accelerate bringing new features to market, and expand our sales and support teams internationally
announcements company -
Aug 12, 2021 How to Build a Startup Security Team: Advice from Security Experts
With the rise of security threats comes an increased need for strong security measures, but it’s hard to know where to invest your time and money, especially if you’re a small startup.
teleport security -
Aug 10, 2021 Achieving SOC2 Compliance for Teleport Cloud with Teleport On-Prem
In this blog post we illustrate how we use Teleport to achieve SOC2 compliance at Teleport
security -
Aug 5, 2021 Kubernetes API Access Security Hardening.
Kubernetes is driven by an HTTP API server which allows complete configuration and control of Kubernetes runtime. Therefore, securing access to the API server is one of the most critical security controls to ensure resilient Kubernetes in production.
kubernetes security -
Jul 29, 2021 Securing Access to Your MongoDB Database
Overview of the best practices for securing access to MongoDB databases.
mongodb security -
Jul 22, 2021 Preventing Data Exfiltration with eBPF
An introduction to KRSI and how you can use it to dynamically prevent data exfiltration based on IP ranges.
security teleport -
Jul 12, 2021 RBAC and ABAC with AWS IAM
When talking about application authorizations, we often encounter two concepts RBAC (role-based access control) and ABAC (attribute-based access control).
programming cybersecurity -
Jun 30, 2021 Securing Access to Production MySQL Databases.
MySQL brands itself as the world's most popular open source database. It has a corpus of tools and tutorials to automate MySQL, SQL injection and a notorious list of past vulnerabilities; as popular as MySQL database is among developers and SQL enthusiasts, it is equally popular among hackers.
programming cybersecurity -
Jun 24, 2021 Teleport has been named a Cool Vendor in Gartner's Identity-First Security report
Congratulations to the Teleport team! We have been included as a Cool Vendor in Gartner Cool Vendors in Identity-First Security report for 2021.
company announcements -
Jun 23, 2021 How does AWS IAM role, STS and Identity Pool work with each other.
In this post, we briefly talk about accessing AWS resources using Cognito Identiy Pool and how you use it combination with AWS STS (Security Token Service) to provide temporary credentials.
programming cybersecurity -
Jun 16, 2021 AWS IAM in layman's terms
In this post, we briefly talk about leveraging the right type of AWS IAM policy mechanisms to build the responsibility separation between the “central” team and the individual “development” team.
programming cybersecurity -
May 27, 2021 Teleport 6.2
Teleport 6.2 brings enhancements across the board, including the ability to list Databases and Kubernetes Clusters in Teleport and Amazon Redshift support.
teleport announcements -
May 25, 2021 Securing Open Source Infrastructure
Teleport is offering a free Teleport Pro account for Open Source Projects. Helping teams and projects secure and collaborate at scale.
announcements -
May 14, 2021 Pull Requests for Infrastructure Access
Access requests is a new modern technique to implement the principle of least privilege for accessing cloud-native infrastructure. In this blog post, we’ll cover how to get started with access requests using Teleport
teleport security -
May 11, 2021 Teleport Cloud in 2021: Security Audit Results
Results and independent analysis from a third party on the Teleport Cloud service. May 2021.
teleport -
May 4, 2021 Secure Session Transfer Between Web Apps on Different Domains
Russell examines the available mechanisms for securely transferring user sessions across different web applications running at different domains.
teleport security -
Apr 15, 2021 What I Wish I Knew About U2F and Other Hardware MFA Protocols
We revamped the second-factor authentication in Teleport 6.0. This post provides a birds-eye view of U2F and other cryptographic hardware standards.
security -
Apr 13, 2021 How SAML 2.0 Authentication Works?
Learn what SAML 2.0 Authentication is and how it works. SAML implements corporate single sign-on (SSO) solutions for centralized identity management.
security teleport -
Apr 8, 2021 Teleport in 2021: Security Audit Results
Results and independent analysis from a third party on the Teleport project. April 2021.
teleport -
Apr 6, 2021 Comparing SSH Keys - RSA, DSA, ECDSA, or EdDSA?
This article compares asymmetric crypto algorithms. In the PKI world they are RSA, DSA, ECDSA, and EdDSA. Which SSH crypto algorithm is the best?
ssh -
Apr 2, 2021 Securing Your PostgreSQL Database
A comprehensive overview of the best practices for securing access to PostgreSQL databases.
postgres security -
Mar 30, 2021 How to Set Up an SSH Jump Server
In this blog post we explain how to set up an SSH jump server using two open source projects.
ssh -
Mar 25, 2021 SSRF Attack Examples and Mitigations
Understanding Server-Side Request Forgery (SSRF) and Its Mitigations.
teleport security -
Mar 25, 2021 CSRF Attack Examples and Mitigations
Understanding Cross-Site Request Forgery (CSRF) and its Mitigations.
teleport security -
Mar 17, 2021 Teleport 6.0 Brings Identity-Aware Access to Databases Behind NAT
The highlight of this release is added support for the PostgreSQL and MySQL wire protocols. Teleport users can now use their identities to connect via SSO and MFA to any database behind NAT.
teleport -
Mar 8, 2021 Teleport Compared to AWS SSM Session Manager
AWS Systems Manager provides session management and session recording features. We’ll explore these new interactive capabilities and compare them to Teleport
teleport -
Mar 4, 2021 In Search of a Perfect Access Control System
Making sense of authorization, policy and access management systems.
ssh teleport security -
Feb 23, 2021 XSS Attack Examples and Mitigations
Understanding Cross-Site Scripting (XSS) and Its Mitigations.
teleport security -
Feb 18, 2021 SSH Certificates Security
How to deploy SSH certificates in production to make security better, not worse.
ssh teleport security -
Feb 9, 2021 SaaS Design Principles with Kubernetes
Users interact with SaaS differently than on-prem. When we built Teleport Cloud, we deliberately designed it to reflect this change.
engineering -
Jan 25, 2021 How to SSH Properly
What are SSH security best practices? How to SSH properly and improve the security of your SSH model using nothing but OpenSSH?
ssh teleport security -
Jan 25, 2021 Microservices, Containers and Kubernetes in 10 minutes
What is a microservice? What is Kubernetes for? In this post, we try to explain microservices, containers and Kubernetes in 10 minutes
kubernetes programming security -
Jan 13, 2021 ECMWF - How Third Parties Securely Access Supercomputing Clusters
Managing shell level access access is difficult enough when you know your users. So how do you implement secure access to a revolving door of users?
security -
Dec 21, 2020 How We Use Fuzzing Integrated by Ada Logics
A fuzzer is a program that passes randomized data to an entrypoint of a target application. The goal is to stress test the target application.
engineering -
Dec 10, 2020 Unify Access to Cloud - Iterating on Identity-Based Management
Unify indentity access controls across the entire stack with a single place to define, enforce, view, and manage global authorization.
security -
Dec 3, 2020 The Pitfalls of Language Runtimes and Multi-tenant Services
Explore edge-cases in which programming language runtimes fail to provide fair resource scheduling that leads to outages.
programming -
Dec 1, 2020 Introducing Teleport Cloud
Teleport Cloud brings cloud-based access to SSH servers and Kubernetes clusters anywhere in the world.
company -
Nov 19, 2020 Gravitational Rebrands as Teleport
We have renamed ourselves Teleport! In this blog post our CEO covers the Teleport mission and makes some new product announcements.
company -
Nov 19, 2020 Announcing Teleport 5.0 - Access Plane and Application Access
How to access web applications from behind NAT? How to safely expose internal dashboards to the outside world? Teleport 5.0 is the answer!
company -
Nov 19, 2020 Gravitational Rebrands to Teleport, Ushers in New Era of Environment-Free Computing
Teleport is the First Platform to Consolidate Access, Audit, and Compliance Across All Environments
company -
Nov 11, 2020 What the Twitter Hack Says About Your Company
The Twitter hack was not orchestrated by a sophisticated operation coordinated by a nation state. Twitter was hacked by an average teenager who was too young to have his own license.
security -
Nov 5, 2020 What is eBPF and How Does it Work?
eBPF lets programmers execute custom bytecode within the kernel without having to change the kernel or load kernel modules.
engineering -
Oct 20, 2020 Teleport 4.4: Concurrent Session Control & Session Streaming
Teleport 4.4 enables greater control for SSH and Kubernetes sessions with concurrent session control and the ability to stream recorded sessions.
teleport -
Oct 20, 2020 Session Control for SSH and Kubernetes in Teleport 4.4
Announcing Teleport 4.4! This release brings the SSH session control to apply restrictions on sessions which is critical for FedRAMP compliance.
teleport -
Oct 15, 2020 How to Set Up Kubernetes SSO with SAML
Kubernetes doesn’t support native SAML integration. Learn how to configure SAML single sign on (SSO) for Kubernetes clusters with user impersonation.
kubernetes -
Sep 30, 2020 SSH configuration: ssh_config
What is ssh_config? How do you configure an SSH client with it? This blog post offers some of our favorite tips and tricks!
ssh -
Sep 10, 2020 Best Practices for Secure Infrastructure Access
This paper talks about how companies can secure infrastructure access by basing decisions on identity, not trusting private networks, and centralizing auditing/monitoring.
security -
Sep 8, 2020 #KelseyProject: Becoming the Beyonce of Engineering
This blog post dives into the Kelsey Project and how Teleport is working to grow diverse engineering talent instead of just finding it.
company -
Sep 3, 2020 Celebrate Open Source Day with Gravitons
Happy Open Source Day! Teleport has established a set of holidays for better employee mental health, one of which we are celebrating tomorrow.
company -
Aug 20, 2020 How I Found Myself in a Command Line vs. GUI Meeting
Web browser limitations guided our work with Teleport’s new web UI. They caused lengthy discussions, but we were all proud of the final product.
teleport -
Aug 12, 2020 kubectl exec vs SSH
SSH is architecturally set, but higher-level software can learn from Kubernetes about centralized config when managing a fleet of machines.
ssh teleport kubernetes -
Aug 6, 2020 How OIDC Authentication Works
What is OIDC? This blog post compares two common authentication methods (OIDC and SAML) and discusses how OIDC works in relation to OAuth.
security -
Jul 29, 2020 SOC 2 Certification - Table Stakes for B2B SaaS
In this blog post we aim to provide some clarity on what SOC 2 is, what to expect from the certification process based on our own experiences preparing for our Teleport Cloud launch
security -
Jul 28, 2020 Setting Up an SSH Bastion Host
In this blog post, we’ll go over the installation and configuration of SSH bastion hosts using two open source products.
ssh -
Jul 23, 2020 Bridging the Gap Between Designers and Developers
In the recently released Teleport 4.3, we have completely redesigned the UI. To do so, it was important to create a healthy relationship between designers and developers on the team.
teleport -
Jul 16, 2020 Teleport Demo Video - Modern SSH
Teleport allows easy implementation of SSH best practices. Here is a video that takes a deep dive into how Teleport works.
teleport -
Jul 15, 2020 How OAuth Authentication Works
Guide to OAuth: OAuth exists to provide third party applications limited access to secure resources without compromising the user’s data.
cybersecurity -
Jul 9, 2020 Teleport 4.3 - Modern Replacement for OpenSSH
What's new in Teleport 4.3. Overview of new features - new UI, API driven, expanded audit capabilities. A modern open source replacement for OpenSSH
announcements -
Jul 8, 2020 4.3 Release Notes: New UI & Approval Workflow
This is a major Teleport release with new features, and bug fixes, including a new UI and plugins such as PagerDuty, Jira, Slack, and Mattermost.
announcements -
Jun 18, 2020 SCP - Familiar, Simple, Insecure, and Slow
SCP is a simple tool with a quirky implementation. It does an okay job at moving files around, but newer software like SFTP and Rsync outperforms it.
engineering -
Jun 9, 2020 Companies Without Racists can Perpetuate Racism
It is not enough to not be racist. We need to actively be anti-racist. Teleport is committing to diversity - Black Lives Matter.
company -
Jun 3, 2020 VPNs and Zero Trust: Thoughts on the Evolving Nature of Remote Access
Compare Zero Trust with “traditional” network security models focusing on the access portions of networks
security -
May 27, 2020 Why Blockchain Needs Kubernetes
Why Kubernetes simplified deployments, interoperability, and upgradeability are key to the evolution of Blockchain Networks.
kubernetes -
May 20, 2020 How We Built SELinux Support for Kubernetes in Gravity 7.0
Learn how we built SELinux support for Gravity 7.0, issues we had, and useful tips. Also learn how we are confining Kubernetes services and workloads.
gravity security -
May 6, 2020 Solid Infrastructure Security without Slowing Down Developers
How SaaS companies approach the trade-off between having solid cloud infrastructure security and upsetting their own engineers by overdoing it
security -
Apr 30, 2020 How to SSH into a Self-driving Vehicle
You can SSH into self-driving robots using a reverse SSH tunnel, but this method only scales so far, and it requires more than 50 steps to set up.
ssh security -
Apr 23, 2020 From Zero to Zero Trust
Evolution from perimeter based security to Zero Trust security - how it protects modern organizations, remote workforces, and web applications.
security -
Apr 7, 2020 Surviving The Upside Down
Here are a few thoughts and resources about managing your SaaS business and perhaps even thriving as you shelter in place.
company -
Mar 26, 2020 The Future of Women at Teleport
Women’s history month is almost over, but it’s still important to consider the contributions of women.
company -
Mar 17, 2020 Applying the Principles of Zero Trust to SSH
The Zero Trust approach to SSH and security is based not on where you are, but who you are, making it possible to access resources in cloud-native, hybrid cloud, or legacy environments securely.
teleport security -
Mar 10, 2020 Deploying to Kubernetes Clusters with No Access
This post looks into preparing a Kubernetes app to be deployed into a large number of Kubernetes clusters, even without direct access to them all.
kubernetes gravity -
Mar 4, 2020 Announcing Gravity 7.0
Gravity 7.0 allows users to deploy Gravity cluster images into Kubernetes clusters and makes it easier to run Gravity clusters in secure environments.
announcements -
Feb 27, 2020 BPF to transform SSH Sessions to Structured Event
Teleport’s Enhanced Session Recording feature can add vital extra visibility into commands being run on your systems.
security teleport -
Feb 25, 2020 Security Audit Results for Teleport
Results and independent analysis from a third party on the Teleport project.
gravity teleport -
Feb 19, 2020 Adopting an Open Source Organizational Culture
This post focuses on the way that open source elements influence Teleport's organizational culture, human resources, and hiring.
company -
Jan 29, 2020 Simplifying Secure Server Access with Teleport’s Approval Workflow
The new Teleport Workflow API gives users a new way to escalate permissions with administrative approval.
teleport ssh -
Jan 22, 2020 Computer Wizard Woes: The Cursed Terminal Session
How to use session recording and session sharing to troubleshoot an SSH Terminal Session Easily
teleport -
Jan 15, 2020 2019: From Product-Market Fit to Series A
In 2019, Teleport achieved product-market fit and raised the funding necessary to be able to shift focus to scaling what already works.
announcements -
Jan 7, 2020 Teleport 4.2 Released - Enhanced Session Recording, Workflows, and GCP
Teleport 4.2 delivers a strong foundation of new features, with greater visibility into what's happening during sessions and our new Workflows API.
teleport ssh -
Dec 5, 2019 Packaging Your SaaS Application to Ship to Customers
The public cloud is a solution for many customer workloads but not for all. Teleport's insight into what it means moving from SaaS to on-prem.
kubernetes gravity -
Nov 20, 2019 Announcing our Series A
Announcing our Series A funding to unchain applications from the cloud providers.
company announcements -
Nov 7, 2019 The design of Teleport’s Discovery Protocol
An inside look at how we designed a discovery protocol for Teleport.
ssh teleport engineering -
Oct 21, 2019 Getting Visibility Across Your Cloud Environments
Most monitoring tools are great for a high-level view of how your applications and infrastructure are performing, but have many gaps when it comes to security. In this blog, we look at two areas where visibility is typically lacking: SSH and Kubernetes.
teleport security -
Oct 14, 2019 Certificate Authorities Explained
In this article, we explain what a certificate authority is and what role it plays in securing communication between a user and a resource.
teleport -
Oct 8, 2019 Hiring: Coding Challenges Make Us Better
In this article we explain how Teleport approaches hiring systems engineers
programming -
Oct 2, 2019 Teleport 4.1 - IPv6, ProxyJump and Packages
Hot on the heels of our 4.0 release, we now have another point bump to Teleport. Teleport now speaks IPv6, ProxyJump, Debian & RPM packages and much more.
teleport -
Sep 30, 2019 Deploying Applications into Air Gapped Environments
In this blog post we explain how to take a cloud-native application and deploy into air gapped environments or on-prem environments.
kubernetes gravity -
Sep 23, 2019 Hybrid Cloud vs Multicloud: What's the Difference?
Hybrid cloud had been the talk of the town, but now it's about multi-cloud. What happened?
gravity -
Sep 11, 2019 Securing Gladly’s Cloud-Native Systems
Teleport helped Gladly secure their cloud-native infrastructure, provided logs for customers and auditors, and allowed their team to focus on building a great product rather than managing privileged access.
teleport -
Aug 29, 2019 Case Study: How Anaconda Delivers its Platform
Learn why Anaconda selected Teleport to package their Kubernetes-based application to Enterprise customers.
gravity -
Jul 24, 2019 Meetup in Seattle
Join us next month at our new Seattle office for two tech talks, food, and schmoozing.
company announcements -
Jul 23, 2019 Deliver Your Kubernetes Applications Anywhere
Gravity is now production ready with a shiny new web UI, simplified logging, new Prometheus-driven event monitoring and advanced privileged access management (PAM) features. In this article, we walk through many of the newest features.
kubernetes gravity -
Jul 16, 2019 How Uber, Facebook, and Netflix Do SSH
How are some big, well-known companies approaching SSH? We took a look at three who are setting an example for others to follow.
ssh security -
Jun 18, 2019 IoT Security, FedRAMP Support
Today we’re announcing a new milestone with Teleport 4.0 - IoT Security, FedRAMP Support
teleport security -
Jun 3, 2019 SaaS vs Open Core: Which Business Model Is Best?
In the last of this three part series comparing SaaS and Open Core software, we will evaluate the S-1 filings of a few SaaS and Open Core companies to determine if either model has any inherent advantage.
kubernetes gravity -
May 30, 2019 Through the Wormhole: Network Security for Kubernetes with Wireguard
Discussion on Wormhole - networking plugin for Kubernetes. How do Kubernetes solutions trust the underlying network? - What about WireGuard/Wormhole?
kubernetes security -
May 22, 2019 AWS: Rolling your own servers with K8s, Part 3
In the final chapter of this series, we look at why Kubernetes is a better choice than virtualization to enable a more “cloudy” mode of operations on your new cluster.
kubernetes -
May 21, 2019 Announcing Gravity 6.0
Gravity v6.0 is out in beta with a brand new UI/UX experience, improved logging and additional Teleport features exposed.
kubernetes gravity -
May 16, 2019 Stop Downtime with Kubernetes Resource Planning
A single pod in a Kubernetes cluster runs well by itself... to a point. As your teams grow in size and complexity and your cluster hosts more nodes, stability issues will start to surface. By assigning defined values, you can ensure critical apps have the highest level of Quality of Service (QoS) they deserve.
kubernetes -
May 14, 2019 AWS: Rolling your own servers with K8s, Part 2
This is part three of a three-part series on considerations that companies will want to address if they decide to build their own cloud environment.
kubernetes -
May 9, 2019 SSH Handshake Explained
Secure Shell (SSH) is a widely used Transport Layer Protocol to secure connections between clients and servers. In this post we explain how SSH handshake works.
ssh teleport security -
May 6, 2019 AWS: Rolling your own servers with K8s, Part 1
This is part one of a three-part series on considerations that companies will want to address if they decide to build their own cloud environment.
kubernetes -
May 2, 2019 SaaS vs Open Core Software: Advantages and Disadvantages from the Customer Perspective
In post 2 of 3, we clarify the differences between proprietary SaaS and Open Core software and discuss the advantages and disadvantages of each from the customer's perspective.
kubernetes gravity -
Apr 29, 2019 WireGuard for Kubernetes: Introducing Wormhole
We are excited to announce the new open source project: Teleport Wormhole, a Kubernetes network plugin that combines the simplicity of flannel with encrypted networking from WireGuard.
kubernetes security -
Apr 25, 2019 SaaS vs Open Core Software: An Introduction
What next after SaaS? Is a significant alternative for marketing and selling software starting to emerge?
kubernetes gravity -
Apr 15, 2019 How Auth0 meets PCI and SSH Requirements
Auth0 selected Teleport to provide secure access to their customers’ infrastructure, whether it’s hosted in a public or private environment.
teleport ssh -
Apr 1, 2019 SSH Kubernetes bastion for AWS EKS
This new release of Teleport brings support for EKS. Now Teleport can act as a single authentication gateway for Kubernetes clusters running on EKS
ssh teleport kubernetes -
Mar 18, 2019 Gravity 5.5 gives superpowers to Helm: package Kubernetes apps as self-contained tarballs
The 5.5 release entrusts Helm users with a new superpower: the ability to build downloadable Kubernetes images using their Helm Charts.
kubernetes gravity -
Mar 13, 2019 Restricted Shells: Sometimes Persuasive But Usually Fallacious
How to restrict SSH sessions to specific commands? How to have a restricted shell for some users? In this article we cover some common ways to answer these questions.
ssh teleport programming security -
Mar 1, 2019 The full-time job of keeping up with Kubernetes
How to keep up with Kubernetes releases? Unabated releases of vanilla Kubernetes every three months could continue forever. In this article, we discuss where this pace comes from, how it's a key ingredient in Kubernetes' success and what it means for end-users
kubernetes gravity -
Feb 26, 2019 How to Use Certificate Pinning to Improve UX
An overview of Teleport's SSH certificate authority pinning capability and discussion of how HTTP public key pinning (HPKP) can be used to improve SSH CA user experience.
ssh teleport programming security -
Feb 21, 2019 Open Source Serverless Solutions for Kubernetes
The universe of serverless-wielding software architects and Kubernetes cluster operators has started to collide and, yet again, Google is in the driver's seat. In this article we'll wander down the CNCF's Serverless Landscape in chronological order, quickly discovering that Knative is the sweet mamba jamba of open source lambda competitors.
kubernetes programming security -
Jan 29, 2019 The Kubernetes Kustomize KEP Kerfuffle
In this post we'll explore K8s community decision making process by looking underneath the hood of the 'kerfluffe' of Google LLC being called out by Samsung SDS engineers for skipping 'graduation criteria' while merging the new 'kustomize' subcommand into upstream 'kubectl'.
kubernetes programming security -
Jan 21, 2019 Underappreciated xterm bug resurfaces in xterm.js, exposing millions of VSCode users
The recently discovered xterm.js vulnerability shows how bugs are hard to kill as technology evolves.
ssh teleport security -
Dec 5, 2018 CVE in the heart of Kubernetes apiserver
An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected
kubernetes gravity -
Oct 3, 2018 Authenticate against GKE without gcloud
GKE requires users to have Google Cloud Tools (gcloud) installed. In this post show how to use authenticate with GKE using generic kubeconfig without having to install anything.
kubernetes programming -
Oct 2, 2018 Teleport universal gateway for SSH and Kubernetes
Today we are announcing the new release of Teleport. This version adds support for Kubernetes protocol, becoming a universal security gateway for both SSH and Kubernetes clusters.
ssh teleport kubernetes -
Sep 14, 2018 Kubeadm + Flannel + Dashboard = 💣
A brief explanation of a common problem that could happen while creating new Kubernetes clusters with Kubeadm, Flannel and installing the Dashboard tool.
kubernetes -
Jul 27, 2018 Teleport 2.7 Released: Improved performance, compliance settings and SCP for Web UI
This release of Teleport adds support for scp protocol via a Web UI, brings performance improvements for large clusters and adds more flexibility in configuring your infrastructure for PCI, SOC2, GDPR and other SSH compliance/audit use cases.
ssh teleport -
Jul 3, 2018 The Horrors of Upgrading Etcd Beneath Kubernetes
Proud new Kubernetes cluster owners are often lulled into a false sense of operational confidence by its consensus database’s glorious simplicity. In this Q&A, we dig into the challenges of in-place upgrades of etcd beneath autonomous Kubernetes clusters running within air-gapped environments.
programming kubernetes gravity -
Jun 8, 2018 Restarting a Go Program Without Downtime
This post discusses the different approaches that can be taken to gracefully restart an application and provides a working sample that can be used to dig into the details. This post should be interesting to developers and SREs who build and maintain services written in Go.
engineering -
Jun 1, 2018 Teleport 2.6 Audit Report is Available
Cyber security researches from Cure53 have completed a full security audit of Teleport, the privileged access management layer for SSH and Kubernetes. Here is a brief summary of their findings and links to the full source-assisted penetration test report.
ssh teleport -
May 31, 2018 Teleport 2.6 Release Information
We are happy to announce the release of v2.6 of Teleport. This is a major release which delivers several important new features. The source code of this release has also gone through a security audit performed by Cure53.
ssh teleport -
May 24, 2018 Chasing missing SIGINT signals - SSH
This post is the first of an ongoing series about interesting issues and bugs that the Teleport team has worked on. This post, about missing SIGINTs and SSH, should be interesting for developers who leverage signal handling in terminal-based applications written in Go.
programming ssh teleport -
Apr 30, 2018 The False Allure of Hashing for Anonymization
Why using cryptographic hashes doesn't make data anonymous.
programming -
Apr 20, 2018 How to use Teleport RBAC with OpenSSH servers
Technical deep dive into an RBAC mechanism to restrict access to critical nodes within an OpenSSH cluster.
ssh teleport -
Mar 26, 2018 GDPR - SaaS reconsiders on-premises software
We review the impact of the GDPR on SaaS vendors and their data collection practices and how it may reduce the operational cost disparity between hosted SaaS and on-prem Private SaaS
gravity -
Mar 10, 2018 Teleport 2.5 released
This release of Teleport brings easier AWS deployments at scale and includes several usability enhancements.
ssh teleport -
Feb 5, 2018 How to use Let's Encrypt with an SSH Bastion
The Teleport Proxy requires a valid x509 certificate to serve content like the Web UI via HTTPS. In this post we show how to configure the Teleport Proxy to use Let's Encrypt for this.
ssh teleport -
Feb 2, 2018 SSH Key Management & SSH Key managers
How to avoid managing SSH keys and switch to short-lived SSH certificates.
ssh teleport -
Jan 24, 2018 SSH using Github team membership via OAuth2 + 2FA
In this post we show you how to use Github as an identity manager to control who has access to your server infrastructure through SSH
ssh teleport security -
Jan 22, 2018 Experiences with running PostgreSQL on Kubernetes
An interview about our experience running PostgreSQL on on-premises Kubernetes, covering the challenges involved, open source and commercial tools that can help and other alternatives to managing stateful applications on Kubernetes.
kubernetes gravity -
Jan 18, 2018 How to record SSH sessions with OpenSSH servers
In this blog post we show how to record SSH sessions with OpenSSH sshd using Teleport as a recording proxy
ssh teleport security -
Jan 11, 2018 OpenSSH vs Teleport SSH for Servers?
We cover the difference between OpenSSH servers and Teleport SSH node service for Teleport clusters.
ssh teleport -
Jan 10, 2018 Teleport 2.4 released
Announcing the new version of Teleport SSH server. Two major new features of this release are recording of OpenSSH sesssions for audit purposes and authentication via Github OAuth2.
ssh teleport -
Dec 2, 2017 Migrating To Kubernetes
Learn about common problems when migrating your application to Kubernetes.
kubernetes gravity -
Nov 3, 2017 Announcing Gravity v4
We are pleased to announce that Gravity v4 is now a long term support release with version 4.44.0 LTS. This release focuses on improved security, usability and stability.
kubernetes gravity -
Oct 19, 2017 Troubleshooting Kubernetes Networking Issues
Part 1 of our series on Troubleshooting Kubernetes focuses on networking.
kubernetes gravity -
Sep 19, 2017 Teleport 2.3 Release - Easy to use
We are happy to announce the release of v2.3 of Teleport. This release focuses on making Teleport much easier to configure and use.
ssh teleport -
Jul 21, 2017 Scaling Managed Services in the Cloud Era
We review the challenges MSPs face in a hybrid, multi-cloud world.
gravity teleport -
Jun 25, 2017 Kubernetes Production Patterns and Anti-Patterns
We explore helpful techniques to improve resiliency and high availability of Kubernetes deployments and take a look at some common mistakes to avoid when working with Docker and Kubernetes.
gravity kubernetes -
Jun 13, 2017 Teleport 2.2 Released: New Features, Enhancements and Updated Security Audit Report Published.
This post covers the new features and improvements that made it into 2.2 release.
ssh teleport -
May 8, 2017 SSH Kubernetes: Permissions and Dynamic Workloads
How we use Teleport to manage Kubernetes clusters across multiple teams, regions or organizations.
kubernetes ssh -
May 3, 2017 Teleport 2.0.5 Security Fixes
Teleport 2.0.5 Security Fixes
ssh teleport -
Apr 25, 2017 SSH into AWS using Github for RBAC
How do you let your employees access company AWS infrastructure using their Github credentials? How do you restrict parts of your infrastructure to certain Github teams? How do you configure SSH to use Github credentials? This blog post covers it all.
ssh teleport security -
Apr 19, 2017 On-Prem vs SaaS Information Security Compliance
We review the Vendor Security Alliance's security questionnaire to look at the security related costs of running SaaS vs On-prem.
kubernetes ssh gravity -
Apr 11, 2017 Teleport 2.0 Released
Announcing the official 2.0 version of Teleport
ssh teleport -
Jan 25, 2017 SSH into your laptop using their Github handle
We talk about a new feature in Teleconsole: you can turn any laptop into a secure and publicly accessible SSH server which uses Github SSH keys for authentication.
ssh -
Jan 4, 2017 Aggregating SSH logs into SumoLogic
This tutorial covers aggregating SSH access logs from your server fleet into SumoLogic using Teleport
ssh teleport -
Jan 3, 2017 Teleport partners with Tigera to deliver secure, policy driven networking for its Private Kubernetes deployments
Calico is now a standard option in all Gravity deployments.
announcements kubernetes -
Dec 19, 2016 Teleport 1.3 - SSH authentication with 2FA
We are excited to announce that Teleport now supports Universal 2nd Factor out of the box.
ssh teleport -
Nov 23, 2016 Kubernetes 101 Workshop
Go from zero to running a sample Kubernetes application. Learn about Kubernetes Services, Pods, Replica Sets and Configmaps.
kubernetes -
Oct 18, 2016 Keeping Track of Open Source Software Licenses
It might be mundane and boring but keeping track of your FOSS license usage can save you from a big headache at the least opportune time.
programming -
Oct 12, 2016 It's time to reconsider going on-prem
Going on-prem can be a handful, especially maintaining those deployments. Here's how we use Kubernetes and our own tooling to help scale those efforts.
kubernetes gravity -
Oct 4, 2016 Managing Kubernetes: Part I. SSH certificates
Part 1 of the series of articles about managing Kubernetes clusters across multiple teams, regions or organizations.
kubernetes ssh security -
Oct 1, 2016 Teleconsole 0.3.1 Released
Announcing the release of Teleconsole 0.3.1 with a nice list of improvements. For example you can instantly (and securely!) SSH into a laptop of any Github user who trusts you.
ssh announcements -
Sep 21, 2016 Engineering as Marketing
In this post we talk about using every day engineering activities to better market our company and our products.
company -
Jun 23, 2016 Teleport 1.0 Released
We are announcing the official 1.0 version of Teleport: SSH server with built-in bastion and audit!
ssh teleport -
Apr 12, 2016 Teleport: SSH server for clusters and teams
We are excited to announce the new open source project: Teleport, which in some cases can be a modern replacement for OpenSSH.
ssh -
Mar 12, 2016 Monitoring Kubernetes in Production
Kubernetes has great built-in application monitoring features. But how to make sure Kubernetes itself is healthy after you upgrade it to the next version?
kubernetes -
Jan 1, 2016 Go and structured logging with ElasticSearch
We are playing with Elastic Beats, doing structured logging with Golang and Elastic Search
engineering -
Nov 1, 2015 Error Handling in Go Programs
We discuss effective ways to handle errors in Go programming language.
engineering