warpgate

I'm building Warpgate - a FOSS bastion / Teleport alternative / privileged access system that works with native clients without installing anything on either the server or the user's computer. I've released v0.27 yesterday that adds native RDP/VNC support and works with both a web client and mstsc/native VNC viewers. Warpgate also supports SSH/HTTP/Kubernetes/Postgres/MySQL proxying with RBAC, SSO and session recording. It's comfortable handling enterprise environments with 100+ targets and users with SSO, while being a single Rust binary/container. Repo: https://github.com/warp-tech/warpgate Release: https://github.com/warp-tech/warpgate/releases/tag/v0.27.0 v0.27 also adds native horizontal scaling / clustering support I’d really welcome feedback from people operating Teleport/StrongDM/JumpServer alternatives in production (as to what's

TIL about PKIX-SSH, OpenSSH + X.509. https://gitlab.com/secsh/pkixssh http://tech.ciges.net/blog/openssh-with-x509-certificates-ho... Right now I'd stick with something like Gravitational Teleport (overkill); Warpgate may become the perfect fit for this niche soon. https://github.com/warp-tech/warpgate It's also worth knowing about SSH clients that can use X.509 certificate keys as normal pre-shared keys with any SSH server, like PuttyCAC and built-in for macOS High Sierra and later. https://www.idmanagement.gov/implement/scl-ssh/

That's just for building the frontend: https://github.com/warp-tech/warpgate/tree/main/warpgate-adm... Not used or needed at runtime