Tell HN: Retiring Teleport Team | Hacker News Reader

Tell HN: Retiring Teleport Team

8 pointscameronh907 comments

We wanted to reach out to inform you about an important change regarding your Teleport Team plan.

As part of our ongoing efforts to better serve our customers and align our offerings with the evolving needs of the market, we have made the difficult decision to retire Teleport Team. We understand that this change may be disruptive, and we want to assure you that we are committed to making this transition as smooth as possible for you.

Here's what you need to know:

As a valued Team customer, we are offering you a complimentary migration to our Enterprise plan for the next 12 months. Your new plan includes all the features you currently enjoy, plus advanced capabilities designed to secure your growing infrastructure.

This migration process will take place over the coming weeks and will be seamless, ensuring you won't experience any disruptions in service. Your last billing cycle for the Team plan will be this month, April 2024.

After the complimentary period ends on May 31, 2025, you can continue with Enterprise at the standard pricing or explore alternative solutions. To learn more about the Enterprise plan and its features, please visit https://goteleport.com/pricing/.

We also want to take a moment to express our gratitude for trusting Teleport to securely access your infrastructure. Your partnership means a great deal to us, and we are committed to supporting you throughout this transition.

If you have any questions or concerns, please don't hesitate to reach out to us at support@goteleport.com.

Thank you for your understanding and patience as we navigate this change together.

Best, The Teleport Team

[Copied from the email since it doesn't appear to be anywhere on their website. Also useful context is that Gravitational relicensed the community edition as non free software in February, with the restriction that companies with more than 100 employees or $10M ARR can't use it.]

Out of curiosity, do you need anything past the relicensed version (I mean, sure, security fixes aside)

You may also want to edit the title as "Tell HN: Teleport retiring Team plan" since as it currently is written it could be a question, or a blog post about you retiring your teleport team

Fixed the title, thanks.

We were using Teleport Team, which is being discontinued entirely. We could switch to self-hosting, but we'll probably just go back to SSH jump servers which are more straightforward to set up, and don't have the risk that the license will change again to become more restrictive.

If you're on AWS, don't overlook SSM as it's awesome and has killed our use of sshd entirely

I've also heard good things about Tailscale but I haven't personally used it

To be honest, we have moved to SSM for the most part and were more using Teleport for accessing RDS and other VPC-internal endpoints, so I guess a bastion host rather than jump host is probably closer to what we'll end up needing.

Tailscale definitely works a lot better from a pricing perspective and I like how they've put SSO in their premium pricing rather than enterprise, with SCIM being used for enterprise market segmentation instead.

That being said, AWS SSM to a bastion host, then using IAM auth for RDS and EKS will probably do most of what we need. Slightly more effort, but not so much more that it's a deal breaker.

I used to work at Teleport and am now at Tailscale. Both are solid products. Sad to see the Team offering disappearing but sounds like they are moving more towards large enterprise vs the small/medium startup/growth companies (while I was there we had a really healthy mid-market team but I think it's all gone now).

Take a look at Tailscale. If you are all in on AWS then using SSM is solid but if you have general access or other cloud access then Tailscale can probably help you out there.

Have you considered a WireGuard network using a gateway peer/server as opposed to an ssh jump host?

I was looking for similar solutions a while back and finally settled on a WireGuard-based solution.

Tailscale looks very cool as well, but you did mention avoiding unnecessary risks.

Wouldn’t Tailscale be a better solution than Teleport?

Instead of SSH, web apps and some applications, it covers everything. No open ports, ACL, no config, etc.

Reply on news.ycombinator.com