[{"data":1,"prerenderedAt":344},["ShallowReactive",2],{"project-11355976":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":46,"post_text":47,"what":48,"said":83,"maker_in_thread":197,"shape":199,"grid":202,"attempts":306,"same_week":307,"maker_shows":32,"maker_hidden":336,"reader_version":337,"card":338},"11355976","Teleport","SSH for Clusters and Teams","title","Show HN: Teleport – SSH for Clusters and Teams","http:\u002F\u002Fgravitational.com\u002Fteleport\u002F","gravitational.com","twakefield",1458849856,2016,183,43,158,2264,7,"notable","infrastructure","ssh access management","cli",[24,25,26,27,28],"ssh","session recording","bastion","cluster access","openssh","curious",-0.014,{"positive":32,"neutral":33,"mixed":34,"critical":35},4,29,2,5,40,{"execution":38,"docs":40,"privacy":42,"idea":43,"design":45},{"positive":39,"critical":39},1,{"positive":39,"critical":41},0,{"positive":41,"critical":39},{"positive":39,"critical":44},3,{"positive":41,"critical":41},[35,44,44,44,44,44,41,44,44,35,44,41,44,44,39,39,44,44,44,44,44,39,44,35,39,44,35,44,44,44,44,44,44,44,44,44,39,44,44,44],null,{"problem":49,"audience":61,"pricing":47,"motivation":65,"time_to_build":47,"stack":69,"openness":81,"stage":81,"team_size":82},{"value":50,"source":51,"evidence":52},"Managing SSH access to clusters with identity management and recorded sessions","commenter",[53,57],{"id":54,"by":55,"text":56},"11356117","old-gregg","Hello everyone, the Teleport team is here to answer any questions. Internally we use Teleport as a library to connect multiple clusters into a structured system of doing ops with…",{"id":58,"by":59,"text":60},"11356205","pritambaral","This solves a problem we were looking at my last job: recording and replaying sessions. Identity management and bastion setup are solved problems, but it is nice to have an all…",{"value":62,"source":51,"evidence":63},"Ops teams managing multiple clusters of servers",[64],{"id":54,"by":55,"text":56},{"value":66,"source":51,"evidence":67},"Internally used as a library to connect multiple clusters; released as its own tool",[68],{"id":54,"by":55,"text":56},[70],{"value":71,"source":51,"evidence":72},"Go",[73,77],{"id":74,"by":75,"text":76},"11357819","newman314","Actually not quite fully, it does not appear that go ssh supports ed25519.",{"id":78,"by":79,"text":80},"11357592","microcolonel","One thing of note: though they do say it's \"fully compatible with OpenSSH\", it is not compatible with ed25519 keyed SSH, as Golang SSH does not support it. Otherwise looks like a…","unknown","team",{"praise":84,"objections":101,"requests":124,"questions":154,"alternatives":175},[85,93],{"value":86,"source":51,"evidence":87},"Good direction for access management and a cleanly designed system",[88,92],{"id":89,"by":90,"text":91},"11356044","Shamiq","Awesome project! This is a step in the right direction for better access management.",{"id":78,"by":79,"text":80},{"value":94,"source":51,"evidence":95},"Session recording and replay is useful",[96,97],{"id":58,"by":59,"text":60},{"id":98,"by":99,"text":100},"11356985","alexk","> 1) How does session archiving work with non-line-oriented applications? (e.g. top and its brethren) We capture and replay the whole stream, so playback works well with…",[102,110,117],{"value":103,"source":51,"evidence":104},"Claims of OpenSSH compatibility overstated; no ed25519 support in Go SSH",[105,106,107],{"id":74,"by":75,"text":76},{"id":78,"by":79,"text":80},{"id":108,"by":99,"text":109},"11357928","Hey, good catch - \"fully compatible\" was an overstatement, so we've updated the landing page!",{"value":111,"source":51,"evidence":112},"Reinvents LDAP\u002FKerberos\u002FRADIUS which already exist",[113],{"id":114,"by":115,"text":116},"11358154","en4bz","How is this any different from the very common LDAP + Kerberos + RADIUS solution that is usually deployed in large companies. This seems like it's re-inventing things that…",{"value":118,"source":51,"evidence":119},"Odd mix of features in one tool",[120],{"id":121,"by":122,"text":123},"11356414","peterwwillis","So, they implemented Active Directory\u002FRADIUS, a terminal proxy, screen, and a web gui? Does this not seem to anyone else like a weird mix of features for one tool?",[125,136,143],{"value":126,"source":51,"evidence":127},"Debian\u002Fbrew\u002Fpkgsrc packaging",[128,132],{"id":129,"by":130,"text":131},"11356215","LukeHoersten","Thanks for releasing this. Any plans to package via brew or apt?",{"id":133,"by":134,"text":135},"11356601","doublerebel","I'd much rather see it in pkgsrc than brew. Then it can easily be applied to the *BSDs and SmartOS.",{"value":137,"source":51,"evidence":138},"Ansible Galaxy role and deeper automation integration",[139],{"id":140,"by":141,"text":142},"11356527","pmuk","Is this compatible with deployment automation systems like Ansible? Do you have any plans to write an Ansible Galaxy role for installation?",{"value":144,"source":51,"evidence":145},"Support for mosh or SFTP",[146,150],{"id":147,"by":148,"text":149},"11356821","ukd1","Looks awesome! does it support mosh by any chance?",{"id":151,"by":152,"text":153},"11358607","visarga","It would be nice if it made backups of small files uploaded\u002Fdeleted\u002Fmodified through SFTP. That, along with the session history, would allow recovery from accidental deletion or…",[155,162,169],{"value":156,"source":51,"evidence":157},"How authentication works with auto scaling nodes",[158],{"id":159,"by":160,"text":161},"11356357","gfloyd","This looks like a really cool project. I'm excited to see it develop. How would authentication work with configuration management? I see that new nodes are authenticated with a…",{"value":163,"source":51,"evidence":164},"Whether it runs a server on every host or uses existing OpenSSH",[165,166],{"id":58,"by":59,"text":60},{"id":167,"by":55,"text":168},"11356287","Sure: 1. You don't have to. http:\u002F\u002Fgravitational.com\u002Fteleport\u002Fdocs\u002Fadmin-guide\u002F#using-teleport-with-openssh 2. It uses existing SSH protocol features, that's why OpenSSH clients…",{"value":170,"source":51,"evidence":171},"Whether it can run commands across many servers",[172],{"id":173,"by":152,"text":174},"11358637","Can teleport run the same command on a group of servers, then collect the output and prefix it with the name of the server it came from? For example we could run a \"df\" on a…",[176,186,190],{"value":177,"source":51,"evidence":178},"Ansible and ansible-shell",[179,183],{"id":180,"by":181,"text":182},"11358682","mikeokner","Ansible-shell can do that. (https:\u002F\u002Fgithub.com\u002Fdominis\u002Fansible-shell\u002Fblob\u002Fmaster\u002FREADME.md)",{"id":184,"by":99,"text":185},"11356600","Sure, Ansible works in it's OpenSSH client mode, check out https:\u002F\u002Fgravitational.com\u002Fteleport\u002Fdocs\u002Fadmin-guide\u002F#using-teleport-with-openssh - Ansible section We are also thinking…",{"value":187,"source":51,"evidence":188},"LDAP, Kerberos and RADIUS",[189],{"id":114,"by":115,"text":116},{"value":191,"source":51,"evidence":192},"goteleport (petar\u002Fgoteleport)",[193],{"id":194,"by":195,"text":196},"11358859","philsnow","This name (\"teleport\") is really close to this other piece of software, which looks to be very much in the same space: https:\u002F\u002Fgithub.com\u002Fpetar\u002Fgoteleport",{"comments":41,"answered":41,"key":198},[],{"commenters":200,"max_depth":35,"maker_replies":41,"first_comment_mins":18,"lifespan_hours":201},26,30,[203,205,208,210,211,213,214,218,222,223,226,229,232,235,237,238,240,243,246,248,250,252,254,256,258,260,262,265,269,273,275,277,279,281,282,284,286,288,291,293,297,300,303],[159,41,35,204,160,41],"project\u002Fpositive\u002Fexecution",[206,41,44,207,99,41],"11356423","project\u002Fneutral\u002Fexecution",[54,39,44,209,55,41],"maker\u002Fneutral\u002Fnone",[129,39,44,207,130,41],[212,39,44,207,55,41],"11356250",[133,39,44,207,134,41],[215,39,41,216,217,41],"11358508","other\u002Fneutral\u002Fnone","nathancahill",[219,39,44,220,221,41],"11356905","project\u002Fneutral\u002Fnone","otterley",[98,39,44,220,99,41],[224,39,35,225,221,41],"11357065","project\u002Fpositive\u002Fdocs",[227,39,44,228,99,41],"11357104","project\u002Fneutral\u002Fdocs",[230,39,41,216,231,41],"11357167","fishnchips",[233,34,44,220,234,41],"11356211","dang",[58,44,44,236,59,41],"project\u002Fneutral\u002Fprivacy",[167,44,44,220,55,41],[74,44,39,239,75,41],"project\u002Fcritical\u002Fexecution",[241,44,39,242,59,41],"11364085","project\u002Fcritical\u002Fprivacy",[244,32,44,220,245,41],"11356151","s0l1dsnak3123",[247,32,44,220,55,41],"11356177",[78,35,44,249,79,41],"project\u002Fmixed\u002Fexecution",[108,35,44,251,99,41],"maker\u002Fneutral\u002Fdocs",[173,253,44,220,152,41],6,[180,253,39,255,181,41],"project\u002Fcritical\u002Fidea",[257,253,44,207,99,41],"11358693",[89,18,35,259,90,41],"project\u002Fpositive\u002Fnone",[114,261,39,255,115,41],8,[263,261,44,264,99,41],"11358492","project\u002Fneutral\u002Fidea",[266,261,35,267,268,41],"11358584","project\u002Fpositive\u002Fidea","aren",[270,271,44,220,272,41],"11356662",9,"felipebrnd",[274,271,44,220,99,41],"11356687",[151,276,44,220,152,41],10,[278,276,44,220,99,41],"11358627",[140,280,44,220,141,41],11,[184,280,44,220,99,41],[194,283,44,220,195,41],12,[147,285,44,220,148,41],13,[287,285,44,220,99,41],"11356868",[289,285,44,220,290,41],"11357689","ef4",[121,292,39,255,122,41],14,[294,292,44,295,296,41],"11357417","project\u002Fmixed\u002Fdesign","noobermin",[298,292,44,299,55,41],"11357521","project\u002Fneutral\u002Fdesign",[301,292,44,220,302,41],"11357639","abstractbeliefs",[304,292,41,305,296,41],"11362570","commenter\u002Fneutral\u002Fnone",[],[308,313,318,323,328,333],{"id":309,"name":310,"points":311,"category":312},"11389989","MapHub",244,"web_saas",{"id":314,"name":315,"points":316,"category":317},"11354021","MovieContentFilter",125,"productivity",{"id":319,"name":320,"points":321,"category":322},"11380711","GRAIL Handwriting Recognizer visualization",119,"learning_science",{"id":324,"name":325,"points":326,"category":327},"11359699","Omniref",110,"dev_tools",{"id":329,"name":330,"points":331,"category":332},"11366943","Pytrader",103,"finance_crypto",{"id":334,"name":335,"points":331,"category":327},"11373305","EverythingStays",false,"v2",{"id":339,"name":5,"line":6,"ai":336,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":340,"top":18,"kw":341,"maker":11,"domain":10,"tier":19,"attempts":41,"strip":342,"url":9,"mix":343,"praise":86,"objection":103,"sub":21},11355976,-0.01,[24,25,26,27,28],"5333330335303311333331351353333333331333",[32,33,34,35],1794036542518]