Gravitational Blog

How to SSH Properly

This post explains security best practices to use SSH properly and securely

The full-time job of keeping up with Kubernetes

Kubernetes releases a new version every three months. We discuss where this pace comes from, why it's key to Kubernetes' success, and what it means for end-users.

SSH Handshake Explained

Secure Shell (SSH) is a widely used Transport Layer Protocol to secure connections between clients and servers. In this post we explain how SSH handshake works.

Rolling your own servers with Kubernetes

This is part one of a three-part series on considerations that companies will want to address if they decide to build their own cloud environment.

Microservices, Containers and Kubernetes in Ten Minutes

What is a microservice? What is Kubernetes for? In this post, we try to explain microservices, containers and Kubernetes in 10 minutes

It's time to reconsider going on-prem

Going on-prem can be a handful, especially maintaining those deployments. Here's how we use Kubernetes and our own tooling to help scale those efforts.

How SAML 2.0 Authentication Works

At its core, Security Assertion Markup Language (SAML) 2.0 is a means to exchange authorization and authentication information between services. Learn how saml works.

Everything you need to know about OAuth 2.0

OAuth provides third party applications limited access to user resources without compromising the user's data. Find out exactly how in this blog.

Using BPF to Transform SSH Sessions into Structured Events

Teleport’s Enhanced Session Recording feature can add vital extra visibility into commands being run on your systems.

The False Allure of Hashing for Anonymization

Why using cryptographic hashes doesn't make data anonymous.

The Horrors of Upgrading Etcd Beneath Kubernetes

We dig into the challenges of in-place etcd upgrades beneath autonomous Kubernetes clusters running in air-gapped environments.

Gravitational Wormhole: WireGuard for Kubernetes

Announcing Teleport Wormhole, a new open source Kubernetes network plugin that combines the simplicity of flannel with encrypted networking from WireGuard.

The silent CVE in the heart of Kubernetes apiserver

An overview into CVE-2018-1002105's root cause and a program to test if your clusters are affected

Experiences with running PostgreSQL on Kubernetes

An interview covering our experience running PostgreSQL on on-premises Kubernetes: challenges, open source and commercial tools, and alternatives for stateful apps.

EU GDPR – Another reason for SaaS to reconsider on-premise

We review GDPR's impact on SaaS vendors and data collection practices and how it may reduce the cost disparity between hosted SaaS and on-premises Private SaaS.

Teleport 2.0 Released: Modern SSH for clusters and teams

Gracefully Restarting a Go Program Without Downtime

This post discusses approaches to gracefully restart a Go application with a working sample, useful for developers and SREs who build services written in Go.

SSH Keygen – RSA, DSA, Ecdsa, EdDSA

Comparing SSH keys: RSA, DSA, ECDSA, and Ed25519 explained, with a straight algorithm recommendation and the move from keys to certificates. Read on.

Teleport 1.3 adds support for SSH authentication with U2F keys

We are excited to announce that Teleport now supports Universal 2nd Factor out of the box.

SaaS vs. Open Core: Which Business Model Is Best?

In the final part of this three-part series, we evaluate S-1 filings from SaaS and Open Core companies to determine if either model has an inherent advantage.