Analysis of the characteristics of the open source fortress machine

Role:

Fortress Machine integrated operation and maintenance management and security integration, cut off the terminal computer to network and server resources direct access, but the use of protocol proxy, take over the terminal computer to network and server access. Figuratively speaking, the terminal computer's access to the target needs to be translated by the Fortress machine.

Purpose of Use:

Authority distribution, audit accountability

Currently popular Fortress machine:

Business: Green League, Cloud Butler, Saiji, Gnway, Polar, Pike
Open Source: Jumpserver, teleport, crazyeye, xxx

Introduction to open Source Fortress machine

Jumpserver:github on the open source Fortress machine, you can buy commercial technical support. http://www.jumpserver.org/
Teleport:github on the open source Fortress machine, no commercial version. http://teleport.eomsoft.net/
Crazyeye: Personal-made Fortress machine, no official website, there is little information.
Kylin Fortress Machine: The open source version only supports a subset of features, the remaining features need to be purchased. http://www.tosec.com.cn/

Jumpserver and Teleport comparison:

Serial Number	Teleport	Jumpserver
1	Simple installation and easy deployment	Installation complex, involving python3.6, need to adjust the conflicts with Yum, need to manually adjust some parameters
2	Can only use the automatic login method, before the decentralization needs to configure the account and password, click to login, do not need to manually enter the password	You can use automatic login and manual login two, manual login refers to the server through the Fortress Machine connection, and then enter the password
3	With the SFTP Upload Tool, double click to upload	Need to upload the software to the Bastion machine server, and then issued to the host, more trouble
4	Unable to automatically collect server information without ansible	With Ansible, can automatically obtain the server information, currently known to collect Linux server data, do not know whether you can collect Windows data information
5	You can choose to connect using terminals such as Xshell or putty or CRT	Use Web terminal by default, do not know whether third-party terminal software can be enabled temporarily
6	Use the RDP protocol to connect Windows servers without the need to install additional software on the bastion machine, just modify a configuration on the server side	Windows is not available by default and requires a mirrored package to be installed on a bastion machine to be used, while a bastion machine is required to run on CentOS7
7	Current test forced Disconnect terminal succeeded	The test found that there were occasional interruptions that required multiple clicks
8	Login Fortress machine temporarily only supports local authentication	Login authentication can be done using LDAP
9	Users need to install a small volume of software on the computer	You do not need to install any software on the client because you use the Web control server
10	No commercial version, can donate to developers	Commercial version, can purchase technical support
11	Concurrent volume Unknown	Concurrent volume Unknown

Interface: Teleport:

Jumpserver:

Analysis of the characteristics of the open source fortress machine