Skip to content

Commit 55d4544

Browse files
ptgottbenarent
ptgott
and
benarent
committed
[v17] Reorganize the feature matrix
Backports #52641 * Reorganize the feature matrix This change organizes the feature matrix according to the latest product categorization scheme, and moves the feature matrix into its own guide to make it more discoverable. While there is opportunity to rework the rows within the feature matrix, this change minimizes the scope of the first iteration by reorganizing the existing rows while leaving them for the most part unchanged. In the new feature matrix page, each Teleport product has its own H2-level section. Product descriptions come from official Marketing language, focusing on concrete statements about what each product comprises and how it works and leaving out statements of value (which are not typically found in documentation). This change does not include sections for categories with no rows in the current table. * Respond to zmb3 feedback Add minor wording tweaks. * Align cells across feature matrix tables Make it easier for a user to follow a single column across multiple tables of the feature matrix. Since the style sets cells to 25% width, which assumes a table that is four cells wide, use a `style` tag so the style only applies to the tables in the `teleport-editions.mdx` guide. Closes gravitational/docs-website#134 * Update the MWI section of the feature matrix Indicate that it is available for Community Edition users. * Edit index.mdx Apply changes made to identical language in teleport-editions.mdx. * Respond to eglenn-teleport feedback - Move the Community Edition column to the final place, rather than the first, since we now want to de-emphasize Community Edition and elevate the commercial offering. - Edit the text to de-emphemphasize "editions", moving the description of editions to the end of the page and linking to this from the heading of relevant feature matrix columns. - Remove section intro paragraphs, since the same information is on the home page of the docs. * Add a Teleport Identity Security section Co-authored-by: Ben Arent <ben@goteleport.com> * Rename MWI features --------- Co-authored-by: Ben Arent <ben@goteleport.com>
1 parent 35b8567 commit 55d4544

File tree

5 files changed

+112
-83
lines changed

5 files changed

+112
-83
lines changed

‎docs/config.json

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,10 @@
2020
"title": "Installation",
2121
"slug": "/installation/"
2222
},
23+
{
24+
"title": "Teleport Feature Matrix",
25+
"slug": "/feature-matrix/"
26+
},
2327
{
2428
"title": "Upgrading",
2529
"slug": "/upgrading/upgrading/",

‎docs/pages/faq.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,9 +27,9 @@ Teleport provides two editions:
2727
- Teleport Enterprise
2828
- Teleport Community Edition
2929

30-
Here is a detailed breakdown of the differences between Teleport's editions.
31-
32-
(!docs/pages/includes/edition-comparison.mdx!)
30+
For a detailed breakdown of features by edition, alongside a description of the
31+
products available to Teleport users, see [Teleport
32+
Editions](./feature-matrix.mdx).
3333

3434
## Should we use Teleport Enterprise or Teleport Community Edition for connecting resources to our Teleport cluster?
3535

‎docs/pages/feature-matrix.mdx

Lines changed: 103 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,103 @@
1+
---
2+
title: Teleport Feature Matrix
3+
description: Provides a comparison of features available in Teleport products.
4+
---
5+
6+
The Teleport feature matrix lists capabilities of the Teleport Infrastructure
7+
Identity Platform, organized by product.
8+
9+
{/*Since the feature matrix includes multiple tables, set a fixed cell width to
10+
ensure that all tables are aligned.*/}
11+
<style dangerouslySetInnerHTML={{__html: `
12+
table {
13+
table-layout: fixed;
14+
}
15+
16+
table td {
17+
width: 25%;
18+
}`}}
19+
/>
20+
21+
## Teleport Zero Trust Access
22+
23+
||[Teleport Enterprise (Cloud)](#teleport-editions)|[Teleport Enterprise (Self-Hosted)](#teleport-editions)|[Teleport Community Edition](#teleport-editions)|
24+
|---|:---:|:---:|:---:|
25+
|Agentless Integration with [OpenSSH Servers](./enroll-resources/server-access/openssh/openssh-agentless.mdx)|✔|✔|✔|
26+
|[Dual Authorization](./admin-guides/access-controls/guides/dual-authz.mdx)|✔|✔|✖|
27+
|[Enhanced Session Recording](./enroll-resources/server-access/guides/bpf-session-recording.mdx)|✔|✔|✔|
28+
|[FedRAMP Control](./admin-guides/access-controls/compliance-frameworks/fedramp.mdx)|✖|✔|✖|
29+
|FIPS-compliant binaries available for FedRAMP High|✖|✔|✖|
30+
|IP-Based Restrictions|✔|✔|✖|
31+
|[Moderated Sessions](./admin-guides/access-controls/guides/joining-sessions.mdx)|✔|✔|✖|
32+
|PCI DSS Features|✔|✔|Limited|
33+
|[Protecting Applications](./enroll-resources/application-access/getting-started.mdx)|✔|✔|✔|
34+
|[Protecting Databases](./enroll-resources/database-access/getting-started.mdx)|✔|✔|✔|
35+
|[Protecting Kubernetes Clusters](./enroll-resources/kubernetes-access/getting-started.mdx)|✔|✔|✔|
36+
|[Protecting Linux Servers](./enroll-resources/server-access/getting-started.mdx)|✔|✔|✔|
37+
|[Protecting Windows Desktops](./enroll-resources/desktop-access/introduction.mdx)|✔|✔|✔|
38+
|[Recording Proxy Mode](./enroll-resources/server-access/guides/recording-proxy-mode.mdx)|✖|✔|✔|
39+
|[Role-Based Access Control](./admin-guides/access-controls/guides/role-templates.mdx)|✔|✔|✔|
40+
|[Session Recording with Playback](./reference/architecture/session-recording.mdx)|✔|✔|✔|
41+
|[Single Sign-On](./admin-guides/access-controls/sso/sso.mdx)|GitHub, Google Workspace, OIDC, SAML, Teleport|GitHub, Google Workspace, OIDC, SAML, Teleport|GitHub|
42+
|SOC 2 Features|✔|✔|Limited|
43+
|[Structured Audit Logs](./reference/monitoring/audit.mdx)|✔|✔|✔|
44+
45+
## Teleport Identity Governance
46+
47+
||[Teleport Enterprise (Cloud)](#teleport-editions)|[Teleport Enterprise (Self-Hosted)](#teleport-editions)|[Teleport Community Edition](#teleport-editions)|
48+
|---|:---:|:---:|:---:|
49+
|[Access Lists & Access Reviews](./admin-guides/access-controls/access-lists/access-lists.mdx)|✔|✔|✖|
50+
|[Access Monitoring & Response](./admin-guides/access-controls/access-monitoring.mdx)|✔|✔|✖|
51+
|[Device Trust](./admin-guides/access-controls/device-trust/guide.mdx)|✔|✔|✖|
52+
|[Endpoint Management: Jamf](./admin-guides/access-controls/device-trust/jamf-integration.mdx)|✔|✔|✖|
53+
|[Hardware Key Support](./admin-guides/access-controls/guides/hardware-key-support.mdx)|✔|✔|✖|
54+
|[Hardware Security Module support](./admin-guides/deploy-a-cluster/hsm.mdx) for encryption at rest|✖|✔|✖|
55+
|[JIT Access Requests](./admin-guides/access-controls/guides/dual-authz.mdx)|✔|✔|Limited|
56+
|[Session & Identity Locks](./admin-guides/access-controls/guides/locking.mdx)|✔|✔|✖|
57+
58+
## Teleport Machine & Workload Identity
59+
60+
||[Teleport Enterprise (Cloud)](#teleport-editions)|[Teleport Enterprise (Self-Hosted)](#teleport-editions)|[Teleport Community Edition](#teleport-editions)|
61+
|---|:---:|:---:|:---:|
62+
|[Machine Access](./enroll-resources/machine-id/getting-started.mdx)|✔|✔|✔|
63+
|[Flexible Workload Identities](./enroll-resources/workload-identity/getting-started.mdx)|✔|✔|✔|
64+
65+
## Teleport Identity Security
66+
67+
||[Teleport Enterprise (Cloud)](#teleport-editions)|[Teleport Enterprise (Self-Hosted)](#teleport-editions)|[Teleport Community Edition](#teleport-editions)|
68+
|---|:---:|:---:|:---:|
69+
|[Identity Security](./admin-guides/teleport-policy/teleport-policy.mdx)|✔|✔|✖|
70+
|[Crown Jewel Monitoring](./admin-guides/teleport-policy/crown-jewels.mdx)|✔|✔|✖|
71+
|[SSH Key Scanning](./admin-guides/teleport-policy/integrations/ssh-keys-scan.mdx)|✔|✔|✖|
72+
73+
## Management and licensing
74+
75+
||[Teleport Enterprise (Cloud)](#teleport-editions)|[Teleport Enterprise (Self-Hosted)](#teleport-editions)|[Teleport Community Edition](#teleport-editions)|
76+
|---|:---:|:---:|:---:|
77+
|Annual or multi-year contracts, volume discounts|✔|✔|✖|
78+
|Anonymized Usage Tracking|✔|✔|Opt-in|
79+
|Auth Service and Proxy Service Management|Fully managed|Self-hosted|Self-hosted|
80+
|[Backend support](./reference/backends.mdx)|All data is stored in DynamoDB and S3 with server-side encryption.|Any S3-compatible storage for session records, many managed backends for custom audit log storage|Any S3-compatible storage for session records, many managed backends for custom audit log storage.|
81+
|Data storage location|Data is stored in Teleport's AWS infrastructure with audit logs/sessions optionally in customer AWS accounts. Proxy Service instances are deployed across the world for low-latency access.|Can store data anywhere in the world, on most managed cloud backends|Can store data anywhere in the world, on most managed cloud backends|
82+
|License|Commercial|Commercial|Commercial|
83+
|Proxy Service domain name|A subdomain of `teleport.sh`|Custom|Custom|
84+
|Support|24x7 support with premium SLAs and account managers|24x7 support with premium SLAs and account managers|Community|
85+
|Version support|Deploys last stable release with 2-3 week lag for stability.|All supported releases available to install and download.|All supported releases available to install and download.|
86+
87+
## Teleport editions
88+
89+
Teleport includes two editions:
90+
- **Teleport Community Edition:** An open source offering intended for demos and
91+
small teams.
92+
- **Teleport Enterprise:** A fully-featured commercial offering.
93+
94+
Teleport Enterprise offers two deployment
95+
options:
96+
- **Cloud:** The Teleport team manages the Teleport Auth Service and Teleport
97+
Proxy Service on the Teleport Cloud infrastructure.
98+
- **Self-Hosted:** Teleport users deploy the Teleport Auth Service and Teleport Proxy
99+
Service on their own infrastructure.
100+
101+
Teleport Enterprise includes add-on products that provide a more complete
102+
infrastructure identity solution, which this guide explains in more detail
103+
below.

‎docs/pages/includes/edition-comparison.mdx

Lines changed: 0 additions & 78 deletions
This file was deleted.

‎docs/pages/index.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,8 +27,8 @@ and protecting time to market.
2727

2828
The **Teleport** Infrastructure Identity **Platform** consists of four products:
2929

30-
- **Teleport Zero Trust Access** provides engineers with just-in-time, least-privileged access
31-
to applications, servers, databases, Kubernetes clusters, and other resources across distributed infrastructures, improving engineering time to market and strengthening infrastructure resiliency.
30+
- **Teleport Zero Trust Access** provides engineers with least-privileged access
31+
to applications, servers, databases, Kubernetes clusters, remote desktops, and other resources across distributed infrastructure, improving engineering time to market and strengthening infrastructure resiliency.
3232
- **Teleport Machine & Workload Identity** provides identity management and access control of
3333
non-human identities, improving infrastructure resiliency by securing system and data access between machines and workloads.
3434
- **Teleport Identity Governance** hardens and monitors identities for both human and non-human identities, improving resiliency of infrastructure from compromise due to human factor or identity attacks.

0 commit comments

Comments
 (0)