--- title: What is SSH session control? | daily.dev description: Teleport 4.4 introduces session control for SSH and Kubernetes connections, adding restrictions needed for FedRAMP and PCI compliance. New capabilities include... canonical: https://daily.dev/posts/what-is-ssh-session-control--abxwkgbzo twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: What is SSH session control? | daily.dev og:description: Teleport 4.4 introduces session control for SSH and Kubernetes connections, adding restrictions needed for FedRAMP and PCI compliance. New capabilities include... og:url: https://daily.dev/posts/what-is-ssh-session-control--abxwkgbzo og:image: https://api.daily.dev/og/posts/aBXwKGBzO.png og:image:alt: What is SSH session control? og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # What is SSH session control? **[Teleport](https://daily.dev/sources/teleport)** · 5 min read · 0 upvotes · 0 comments ## Summary Teleport 4.4 introduces session control for SSH and Kubernetes connections, adding restrictions needed for FedRAMP and PCI compliance. New capabilities include limiting concurrent connections and sessions per client to prevent accidental or intentional DDoS on SSH endpoints, and automatically terminating idle connections (recommended at 15 minutes). Automatic termination of all active sessions for offboarded or compromised users is planned but not yet implemented. The release also improves session streaming performance and includes session recording and session sharing features with RBAC-based viewing controls for auditors. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What new session control features does Teleport 4.4 add for SSH and Kubernetes? Teleport 4.4 adds the ability to limit the number of concurrent connections and concurrent sessions a single client can create, helping prevent accidental or intentional DDoS attacks on SSH endpoints. It also automatically terminates idle connections after a configurable timeout, with 15 minutes recommended to meet FedRAMP and PCI compliance requirements. These controls apply to both SSH and Kubernetes exec sessions. _daily.dev surfaces release notes like this for teams hardening SSH and Kubernetes access controls._ ### What is the difference between a session and a connection in SSH? A connection is the underlying network link between client and server, while a session is the state of an information exchange running over that connection. SSH protocol supports multiplexing, meaning a single connection can host multiple simultaneous sessions, which is why tools that limit access need to control sessions and connections separately. _Developers debugging SSH session behavior can track deeper explainers like this on daily.dev._ ### Does Teleport 4.4 automatically terminate all sessions when an employee leaves or a laptop is stolen? No, Teleport 4.4 does not yet provide automatic termination of all active sessions across every environment when an employee is offboarded or a device is compromised. The technical foundation for this capability was laid in the 4.4 release, with the feature itself planned as a follow-up rather than shipped at that time. _Security teams tracking access-control roadmaps can follow tool updates like this via daily.dev._ --- Tags: [#kubernetes](https://daily.dev/tags/kubernetes), [#compliance](https://daily.dev/tags/compliance), [#ssh](https://daily.dev/tags/ssh) [View this post on daily.dev](https://daily.dev/posts/what-is-ssh-session-control--abxwkgbzo) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"What is SSH session control?","url":"https://daily.dev/posts/what-is-ssh-session-control--abxwkgbzo","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/what-is-ssh-session-control--abxwkgbzo"},"datePublished":"2026-08-23T12:23:06.411Z","dateModified":"2026-08-23T12:53:58.910Z","description":"Teleport 4.4 introduces session control for SSH and Kubernetes connections, adding restrictions needed for FedRAMP and PCI compliance. New capabilities include...","image":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","thumbnailUrl":"https://media.daily.dev/image/upload/s--1KxV4ohY--/f_auto/v1722860400/public/Placeholder%2007","isAccessibleForFree":true,"articleSection":"Teleport","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Teleport","logo":"https://media.daily.dev/image/upload/s--Dw-Bbw6O--/c_limit,w_256/f_auto,q_auto/v1787487494/logos/teleport?_a=BAMAMicg0","url":"https://daily.dev/sources/teleport"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/what-is-ssh-session-control--abxwkgbzo","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"kubernetes,compliance,ssh","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Teleport","item":"https://daily.dev/sources/teleport"},{"@type":"ListItem","position":3,"name":"What is SSH session control?"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/what-is-ssh-session-control--abxwkgbzo#faq","mainEntity":[{"@type":"Question","name":"What new session control features does Teleport 4.4 add for SSH and Kubernetes?","acceptedAnswer":{"@type":"Answer","text":"Teleport 4.4 adds the ability to limit the number of concurrent connections and concurrent sessions a single client can create, helping prevent accidental or intentional DDoS attacks on SSH endpoints. It also automatically terminates idle connections after a configurable timeout, with 15 minutes recommended to meet FedRAMP and PCI compliance requirements. These controls apply to both SSH and Kubernetes exec sessions. daily.dev surfaces release notes like this for teams hardening SSH and Kubernetes access controls."}},{"@type":"Question","name":"What is the difference between a session and a connection in SSH?","acceptedAnswer":{"@type":"Answer","text":"A connection is the underlying network link between client and server, while a session is the state of an information exchange running over that connection. SSH protocol supports multiplexing, meaning a single connection can host multiple simultaneous sessions, which is why tools that limit access need to control sessions and connections separately. Developers debugging SSH session behavior can track deeper explainers like this on daily.dev."}},{"@type":"Question","name":"Does Teleport 4.4 automatically terminate all sessions when an employee leaves or a laptop is stolen?","acceptedAnswer":{"@type":"Answer","text":"No, Teleport 4.4 does not yet provide automatic termination of all active sessions across every environment when an employee is offboarded or a device is compromised. The technical foundation for this capability was laid in the 4.4 release, with the feature itself planned as a follow-up rather than shipped at that time. Security teams tracking access-control roadmaps can follow tool updates like this via daily.dev."}}]} ```