Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 12 additions & 8 deletions docs/pages/architecture/proxy.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -4,14 +4,18 @@ description: Architecture of Teleport's identity-aware proxy service
h1: Teleport Identity-Aware Proxy Service
---

Teleport Proxy is a identity aware proxy, with a web UI. Here are Proxy's key features:

- Users can authenticate with a Single-Sign-On or local credentials to access SSH and Windows Desktops via Proxy's web UI.
- Proxy is identity aware - it makes sure that only authenticated clients can connect to target resources.
It intercepts traffic for multiple protocols - SSH, Kubernetes, HTTPS, databases.
It records commands, API calls and queries and streams them to the audit log.
- Proxy provides networking and connectivity features. Nodes and proxies behind firewalls can connect
to proxies using reverse tunnels. System administrators can use TLS routing feature to compress all ports for all protocols to one TLS port using TLS routing feature.
The Teleport Proxy Service is an identity-aware proxy with a web UI. The Teleport Proxy Service
provides the following key features:

- Enables users to authenticate with a single sign-on identity provider or local credentials to access
SSH and Windows desktops using the Teleport web UI.
- Intercepts traffic for multiple protocols, including SSH, Kubernetes, HTTPS,
and databases, and ensures that only authenticated clients can connect to target resources.
- Records commands, API calls, and queries and streams them to the audit log.
- Provides networking and connectivity so that servers and proxies behind firewalls can connect
using reverse tunnels. S
- Enables system administrators to use TLS routing feature to compress all ports for all protocols
to one TLS port using TLS routing feature.

![Proxy service](../../img/architecture/proxy.png)

Expand Down