Teleport is software which provides an SSH Jump Host (or Bastion host) service in a secure, modern way, with support for role-based access control and single sign-on. It is used to access a number of services at ECMWF, including our Atos HPCF and ECGATE services. The service provides:

• Single SSH hop from client systems anywhere on the internet to servers inside ECMWF (HPC, etc)
• Re-authentication required only every 12 hours (usually once per working day)
• Integration with standard tools such as the OpenSSH ssh client, scp, and ssh-agent
• X11 and Port forwarding

The single sign-on step is performed using an application called "tsh". After that you use standard ssh or scp to connect to systems inside ECMWF.

Here are the instructions on how to set it up depending on your platform:

• Teleport SSH Access - Mac configuration
• Teleport SSH Access - Linux configuration
• Teleport SSH Access - Windows Terminal and Powershell configuration
• Teleport SSH Access - Windows Subsystem for Linux (WSL)
• Teleport SSH Access - Windows MobaXterm configuration
• Teleport SSH Access - Windows Cygwin configuration