--- title: Four Ways Teleport Overcomes the Limitations of VPNs and... description: Legacy VPNs and bastion hosts struggle with modern, ephemeral cloud infrastructure due to poor scalability, high maintenance overhead, static credentials, and... canonical: https://daily.dev/posts/four-ways-teleport-overcomes-the-limitations-of-vpns-and-bastions-ldlidbkzi twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Four Ways Teleport Overcomes the Limitations of VPNs and Bastions | daily.dev og:description: Legacy VPNs and bastion hosts struggle with modern, ephemeral cloud infrastructure due to poor scalability, high maintenance overhead, static credentials, and... og:url: https://daily.dev/posts/four-ways-teleport-overcomes-the-limitations-of-vpns-and-bastions-ldlidbkzi og:image: https://api.daily.dev/og/posts/ldLIDbkZi.png og:image:alt: Four Ways Teleport Overcomes the Limitations of VPNs and Bastions og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Four Ways Teleport Overcomes the Limitations of VPNs and Bastions **[Teleport](https://daily.dev/sources/teleport)** · 10 min read · 0 upvotes · 0 comments ## Summary Legacy VPNs and bastion hosts struggle with modern, ephemeral cloud infrastructure due to poor scalability, high maintenance overhead, static credentials, and limited audit visibility, citing a 2024 Zscaler report finding 56% of organizations suffered VPN-related attacks. Teleport is presented as a zero-trust alternative that replaces VPNs and bastions using role-based access control, ephemeral certificates, direct low-latency resource access, and built-in audit logging and SIEM integration for compliance. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What percentage of organizations experienced VPN-related cyberattacks in the past year? 56% of organizations experienced cyberattacks leveraging VPN vulnerabilities in the past year, according to a 2024 Zscaler report. High-profile incidents cited include the Ivanti/CISA breach, Akira ransomware attacks, and the TunnelVision vulnerability, all involving VPN-centered exploits that highlight the real-world risk of relying on VPNs for infrastructure access. _Security teams weighing VPN risk exposure can track infrastructure access trends on daily.dev._ ### Why are static credentials like SSH keys and passwords considered a security risk for VPN and bastion host access? Static credentials such as passwords, pre-shared keys, and SSH keys are prone to theft, reuse, and phishing, and are difficult to manage and revoke at scale, especially for former employees or contractors. Research from Akamai found that disabling certain VPN features with admin permissions could expose sensitive SSH keys and passwords, worsening the risk. _Engineers evaluating credential management strategies can follow infrastructure access approaches on daily.dev._ --- Tags: [#vpn](https://daily.dev/tags/vpn) [View this post on daily.dev](https://daily.dev/posts/four-ways-teleport-overcomes-the-limitations-of-vpns-and-bastions-ldlidbkzi) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Four Ways Teleport Overcomes the Limitations of VPNs and Bastions","url":"https://daily.dev/posts/four-ways-teleport-overcomes-the-limitations-of-vpns-and-bastions-ldlidbkzi","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/four-ways-teleport-overcomes-the-limitations-of-vpns-and-bastions-ldlidbkzi"},"datePublished":"2026-08-23T12:23:07.531Z","dateModified":"2026-08-23T12:53:25.249Z","description":"Legacy VPNs and bastion hosts struggle with modern, ephemeral cloud infrastructure due to poor scalability, high maintenance overhead, static credentials, and...","image":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","thumbnailUrl":"https://media.daily.dev/image/upload/s--0_ODbtD2--/f_auto/v1722860399/public/Placeholder%2008","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/four-ways-teleport-overcomes-the-limitations-of-vpns-and-bastions-ldlidbkzi","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"vpn","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Four Ways Teleport Overcomes the Limitations of VPNs and Bastions"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/four-ways-teleport-overcomes-the-limitations-of-vpns-and-bastions-ldlidbkzi#faq","mainEntity":[{"@type":"Question","name":"What percentage of organizations experienced VPN-related cyberattacks in the past year?","acceptedAnswer":{"@type":"Answer","text":"56% of organizations experienced cyberattacks leveraging VPN vulnerabilities in the past year, according to a 2024 Zscaler report. High-profile incidents cited include the Ivanti/CISA breach, Akira ransomware attacks, and the TunnelVision vulnerability, all involving VPN-centered exploits that highlight the real-world risk of relying on VPNs for infrastructure access. Security teams weighing VPN risk exposure can track infrastructure access trends on daily.dev."}},{"@type":"Question","name":"Why are static credentials like SSH keys and passwords considered a security risk for VPN and bastion host access?","acceptedAnswer":{"@type":"Answer","text":"Static credentials such as passwords, pre-shared keys, and SSH keys are prone to theft, reuse, and phishing, and are difficult to manage and revoke at scale, especially for former employees or contractors. Research from Akamai found that disabling certain VPN features with admin permissions could expose sensitive SSH keys and passwords, worsening the risk. Engineers evaluating credential management strategies can follow infrastructure access approaches on daily.dev."}}]} ```