Scaling

This section covers recommended configurations for large-scale deployments of Teleport.

Prerequisites

• Teleport v7.3.2 Open Source or Enterprise.

Hardware recommendations

Set up Teleport with a High Availability configuration.

Proxy Configuration

Upgrade Teleport's connection limits from default connection limit from 15000 to 65000 and use in-memory cache instead of default SQLite persistent cache.

teleport:
  cache:
    # Use an in-memory cache to speed up the connection of many teleport nodes
    # back to proxy.
    type: in-memory
  # Set up connection limits to prevent throttling of many nodes connecting to proxies
  connection_limits:
    max_connections: 65000
    max_users: 1000

Auth Configuration

Upgrade Teleport's connection limits from default connection limit from 15000 to 65000.

# Teleport Auth
teleport:
  connection_limits:
    max_connections: 65000
    max_users: 1000

Kernel parameters

Tweak Teleport's systemd unit parameters to allow higher amount of open files:

[Service]
LimitNOFILE=65536

Verify that Teleport's process has high enough file limits:

cat /proc/$(pidof teleport)/limits
Limit                     Soft Limit           Hard Limit           Units
Max open files            65536                65536                files