undefined | Better HN

0 pointsbetaby1y ago0 comments

It's not about RBAC at all. Goal is not to expose ssh socket to the Internet! ssh tcp is encapsulated in https packet and ONLY after successful certificate auth by HAProxy.

0 comments

aflukasz1y ago

Right, but now your are exposing HA proxy socket to the Internet. Why is that better?

j / k navigate · click thread line to collapse

0 pointsbetaby1y ago0 comments

It's not about RBAC at all. Goal is not to expose ssh socket to the Internet! ssh tcp is encapsulated in https packet and ONLY after successful certificate auth by HAProxy.

0 comments

aflukasz1y ago

Right, but now your are exposing HA proxy socket to the Internet. Why is that better?

j / k navigate · click thread line to collapse