opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-11-01 21:52:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
12,109 Commits 9,614 Branches 7,118 Tags
acb255cd883d3d94de949f54e322edacab736112
Commit Graph
14 Commits
Author SHA1 Message Date
Gabriel CoradoandRafał Cieślak bc63dddd7b Verify if proxy can handle application requests when creating session (#20418) 
* feat(app): ensure there are healthy app services when creating session

* Apply suggestions from code review

Co-authored-by: Rafał Cieślak <rafal.cieslak@goteleport.com>

* chore: code review updates

* refactor(app): preflight connection before creating session

* chore(web): change error message

* reafactor(app): change redirect to launcher rule

* refactor(app): rename preflight connection to health check app server

* refactor(apiserver): rename preflight connection

* refactor(apiserver): rename preflight connection

* refactor(apiserver): remove health check property

* test(appaccess): adjust new http status codes returned

---------

Co-authored-by: Rafał Cieślak <rafal.cieslak@goteleport.com>
 2023-02-10 10:42:55 +00:00
Jakub Nyckowski 0ee91f6c37 Enable GCI linter (#17894) 2022-10-28 20:20:28 +00:00
Michael WilsonRyan ClarkRoman Tkachenko
 		756eb91ede Add X-Forwarded-SSL and X-Forwarded-Port to appaccess. (#16965) 
* Add X-Forwarded-SSL and X-Forwarded-Port to appaccess.

Application Access now adds in X-Forwarded-Ssl and X-Forwarded-Port headers.
Tests have been added and adjusted to look for these new headers as well.

* Update lib/srv/app/header_rewriter.go

Co-authored-by: Ryan Clark <ryan.clark@goteleport.com>

* Update integration/appaccess/fixtures.go

Co-authored-by: Roman Tkachenko <roman@goteleport.com>

* Remove common.XForwardedPort

* Change order of websocket delegates.

* Make ReservedHeaders more future-proofed.
 2022-10-12 16:54:53 +00:00
Roman Tkachenko 38b8bb4307 Add support for proxying TCP apps (#13455) 
Add support for proxying tcp apps
 2022-07-26 19:01:39 +00:00
Gabriel Corado be760bbe60 Dial only application servers that serve the requested application (#12217) 
* feat(reversetunnel): add a dial counter on fake remote site

* refactor(app): change `MatchHealthy` to close connections

* refactor(app): change `MatchAll` order to not dial all servers

* refactor(app): only close connection when dial succeeds
 2022-04-28 16:09:43 +00:00
Gabriel Corado 86e92be253 feat: app server requests failover (#9288) 2022-01-13 18:24:33 +00:00
Roman TkachenkoandStefan Sedich 8c3fac832c Set flush interval when forwarding application http requests (#8359) 
Signed-off-by: Roman Tkachenko <roman@gravitational.com>

Co-authored-by: Stefan Sedich <stefan.sedich@gmail.com>
 2021-09-28 15:16:57 -07:00
Roman Tkachenko 4ea2ecdcfc Introduce app server and app resources (#8140) 2021-09-09 14:19:02 -07:00
Brian Joerger 9b8b9d6d0c rollback - Upgrade api version. (#7751) 2021-07-30 15:34:19 -07:00
Brian Joerger c040aca4c1 Upgrade api version. (#7609) 2021-07-28 13:51:21 -07:00
Brian Joerger 7bff7c41bd Remove API aliases (#6983) 2021-06-04 13:29:31 -07:00
Roman Tkachenko b2ff4df8fa Fix app access websockets support (#6072) 2021-03-22 08:56:44 -07:00
Andrej Tokarčík a7f3a05e53 Fix AAP headers injection 2021-03-01 22:14:10 +01:00
Russell Jones 904b0d0488 Added Application Access. 
Added support for an identity aware, RBAC enforcing, mutually
authenticated, web application proxy to Teleport.

* Updated services.Server to support an application servers.
* Updated services.WebSession to support application sessions.
* Added CRUD RPCs for "AppServers".
* Added CRUD RPCs for "AppSessions".
* Added RBAC support using labels for applications.
* Added JWT signer as a services.CertAuthority type.
* Added support for signing and verifying JWT tokens.
* Refactored dynamic label and heartbeat code into standalone packages.
* Added application support to web proxies and new "app_service" to
  proxy mutually authenticated connections from proxy to an internal
  application.
 2020-11-03 14:32:13 -08:00