diff --git a/docs/pages/architecture/proxy.mdx b/docs/pages/architecture/proxy.mdx index 77d1bf7e5b4a9..6efa616806871 100644 --- a/docs/pages/architecture/proxy.mdx +++ b/docs/pages/architecture/proxy.mdx @@ -4,14 +4,18 @@ description: Architecture of Teleport's identity-aware proxy service h1: Teleport Identity-Aware Proxy Service --- -Teleport Proxy is a identity aware proxy, with a web UI. Here are Proxy's key features: - -- Users can authenticate with a Single-Sign-On or local credentials to access SSH and Windows Desktops via Proxy's web UI. -- Proxy is identity aware - it makes sure that only authenticated clients can connect to target resources. -It intercepts traffic for multiple protocols - SSH, Kubernetes, HTTPS, databases. -It records commands, API calls and queries and streams them to the audit log. -- Proxy provides networking and connectivity features. Nodes and proxies behind firewalls can connect -to proxies using reverse tunnels. System administrators can use TLS routing feature to compress all ports for all protocols to one TLS port using TLS routing feature. +The Teleport Proxy Service is an identity-aware proxy with a web UI. The Teleport Proxy Service +provides the following key features: + +- Enables users to authenticate with a single sign-on identity provider or local credentials to access + SSH and Windows desktops using the Teleport web UI. +- Intercepts traffic for multiple protocols, including SSH, Kubernetes, HTTPS, + and databases, and ensures that only authenticated clients can connect to target resources. +- Records commands, API calls, and queries and streams them to the audit log. +- Provides networking and connectivity so that servers and proxies behind firewalls can connect + using reverse tunnels. S +- Enables system administrators to use TLS routing feature to compress all ports for all protocols + to one TLS port using TLS routing feature. ![Proxy service](../../img/architecture/proxy.png)