mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-31 20:39:37 +08:00
rosstimothyandEdoardo Spadolini
7a7f982ed9
The new subcommand is meant to be a replacement for tbot proxy ssh which does the ssh proxying entirely within tbot to reduce resource consumption. The old mechanism spawned a tsh process to perform the proxying which leads to increased CPU and memory consumption - which can be quite problematic when used as an OpenSSH ProxyCommand for an ansible playbook. The new command also deviates in behavior from tsh proxy ssh in that, for the moment, it requires users to explicitly dictate whether tls routing, alpn connection upgrades instead of guessing by making a call to webapi/ping. This again turns out to be quite resource intensive when tbot is used as an OpenSSH ProxyCommand for an ansible playbook. In the future tbot can look this information up out of band and store it in the proper location so that tbot ssh-proxy-command can consume it directly without users needing to provide it. The behavior as is provides a path toward the future while also allowing users to gain the performance improvements now. Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com>