--- title: Teleport 2.2 Release Announcement | daily.dev description: Teleport 2.2 has shipped with new features including HTTP proxy support for behind-firewall clusters, official ARM binaries, client improvements (tsh/ssh... canonical: https://daily.dev/posts/teleport-2-2-release-announcement-hqdy6u97x twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Teleport 2.2 Release Announcement | daily.dev og:description: Teleport 2.2 has shipped with new features including HTTP proxy support for behind-firewall clusters, official ARM binaries, client improvements (tsh/ssh... og:url: https://daily.dev/posts/teleport-2-2-release-announcement-hqdy6u97x og:image: https://api.daily.dev/og/posts/HQdY6U97x.png og:image:alt: Teleport 2.2 Release Announcement og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Teleport 2.2 Release Announcement **[Teleport](https://daily.dev/sources/teleport)** · 7 min read · 0 upvotes · 0 comments ## Summary Teleport 2.2 has shipped with new features including HTTP proxy support for behind-firewall clusters, official ARM binaries, client improvements (tsh/ssh symlink support, identity file authentication via -i flag, per-user environment files), and server-side cipher/MAC restrictions. Enterprise edition gains full SAML 2.0 support and role mapping across trusted clusters. The release also includes a published security audit report from Cure53, following a collaborative engagement that led to the earlier 2.0.5 security patch release. The update is a drop-in replacement for the 2.x series, though backing up cluster state before upgrading is recommended. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What new features does Teleport 2.2 add for SSH access management? Teleport 2.2 adds HTTP proxy support so behind-firewall clusters can tunnel SSH connections through http_proxy and https_proxy environment variables, official ARM binaries for platforms like Raspberry Pi, the ability to restrict SSH ciphers, key exchange algorithms and MACs, and improved OpenSSH interoperability including compatible scp behavior and certificate export formats. _Track infrastructure tool releases like this SSH server update by following daily.dev._ ### How do I authenticate an SSH robot with Teleport without going through 2FA or SAML? Teleport 2.2 supports passing an identity file to tsh ssh using the -i flag, generated once via tctl auth sign --user=joe on the auth server, producing a joe.pem file. That file can then be used with tsh -i joe.pem ssh host to authenticate as that user without answering a 2FA challenge or a SAML login flow, useful for automated SSH clients. _Developers automating SSH access can keep up with tooling changes like this via daily.dev._ ### Is Teleport 2.2 safe to use in production and has it been security audited? Teleport 2.2 includes a full security audit performed by Cure53, a firm known for auditing projects like Dovecot and ntp under Mozilla's Secure Open Source initiative. The engagement started in late April, led to the Teleport 2.0.5 security-fix release, and the complete audit report was made publicly downloadable alongside the 2.2 release, following an earlier private audit before the 1.0 release. _Evaluating self-hosted SSH tooling for production means tracking audits like this on daily.dev._ --- Tags: [#golang](https://daily.dev/tags/golang), [#ssh](https://daily.dev/tags/ssh) [View this post on daily.dev](https://daily.dev/posts/teleport-2-2-release-announcement-hqdy6u97x) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Teleport 2.2 Release Announcement","url":"https://daily.dev/posts/teleport-2-2-release-announcement-hqdy6u97x","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/teleport-2-2-release-announcement-hqdy6u97x"},"datePublished":"2026-08-23T12:22:08.450Z","dateModified":"2026-08-23T12:42:42.937Z","description":"Teleport 2.2 has shipped with new features including HTTP proxy support for behind-firewall clusters, official ARM binaries, client improvements (tsh/ssh...","image":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","thumbnailUrl":"https://media.daily.dev/image/upload/s--qPvKM23u--/f_auto/v1722860399/public/Placeholder%2009","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/teleport-2-2-release-announcement-hqdy6u97x","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"golang,ssh","timeRequired":"PT7M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"Teleport 2.2 Release Announcement"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/teleport-2-2-release-announcement-hqdy6u97x#faq","mainEntity":[{"@type":"Question","name":"What new features does Teleport 2.2 add for SSH access management?","acceptedAnswer":{"@type":"Answer","text":"Teleport 2.2 adds HTTP proxy support so behind-firewall clusters can tunnel SSH connections through http_proxy and https_proxy environment variables, official ARM binaries for platforms like Raspberry Pi, the ability to restrict SSH ciphers, key exchange algorithms and MACs, and improved OpenSSH interoperability including compatible scp behavior and certificate export formats. Track infrastructure tool releases like this SSH server update by following daily.dev."}},{"@type":"Question","name":"How do I authenticate an SSH robot with Teleport without going through 2FA or SAML?","acceptedAnswer":{"@type":"Answer","text":"Teleport 2.2 supports passing an identity file to tsh ssh using the -i flag, generated once via tctl auth sign --user=joe on the auth server, producing a joe.pem file. That file can then be used with tsh -i joe.pem ssh host to authenticate as that user without answering a 2FA challenge or a SAML login flow, useful for automated SSH clients. Developers automating SSH access can keep up with tooling changes like this via daily.dev."}},{"@type":"Question","name":"Is Teleport 2.2 safe to use in production and has it been security audited?","acceptedAnswer":{"@type":"Answer","text":"Teleport 2.2 includes a full security audit performed by Cure53, a firm known for auditing projects like Dovecot and ntp under Mozilla's Secure Open Source initiative. The engagement started in late April, led to the Teleport 2.0.5 security-fix release, and the complete audit report was made publicly downloadable alongside the 2.2 release, following an earlier private audit before the 1.0 release. Evaluating self-hosted SSH tooling for production means tracking audits like this on daily.dev."}}]} ```