diff --git a/pkg/server/templates/about.templ b/pkg/server/templates/about.templ index 9b120a1..447d026 100644 --- a/pkg/server/templates/about.templ +++ b/pkg/server/templates/about.templ @@ -37,14 +37,15 @@ templ About() {
  • This is used by the agent for running an embedded SSH server nad listening for incoming connection requests from clients.
  • -
  • The client/user connects to the converge server using the commmand specified by the agent. +
  • The client/user connects to the converge server using the command specified by the agent. This uses the same id as that used by the agent. The converge server can now match these ids an set up an end-to-end connection from client to agent. The role of converge server is simply in matching these ids and connecting the two websocket connections (from agent and from client) together by copying data between them as it arrives.
  • The embedded SSH server now performs authentication, after successful login, - a shell is spwaned and the network connection of the user is connected to it. + a shell is spawned and the session is established. The shell can be any linux + shell but also command prommpt and powershell are possible. The connection is practically identical to a regular terminal connection. To achieve this some magic is used to make the shell beiieve it is connected to a terminal. @@ -75,7 +76,7 @@ templ About() { having to start over again. Using authorized keys is made easy through the usage page, which provides the exact commands to execute based - on the target environmnet. If users are hesitant to use their public key it is also possible + on the target environment. If users are hesitant to use their public key it is also possible to generate a separate ssh key-pair using ssh-keygen and use that instead.

    @@ -88,8 +89,9 @@ templ About() {

    Converge does not provide any stealth features to hide it. The public sessions page show all agents and clients including details about the clients and the agents. The idea is that it should be light-weight and easy to use. There is no reason to hide the fact that someone is debugging - a continuous integration job. Also, all activity is logged,]both using standard kubernetes tooling - such as (fluentbit/filebat, and loki/elasticsearch depending on the environment). Also, Converge + a continuous integration job. Also, all sessions are logged,both using standard kubernetes tooling + such as (fluentbit/filebeat, and loki/elasticsearch depending on the environment). This logging includes + only the details about the sessions, but not what the user is doing inside a session. Also, Converge provides a prometheus metrics endpoint which allows user sessions to be tracked over time after the fact. Thie data is also made accessible using a grafana dashboard.