Other: Census and proxy agent
Answered
Census to support a proxy agent architecture.
Due to security reasons we moved our architecture towards using proxy agent instead of reverse ssh.
When can we use Census with this architecture?
-
Official comment
Hey Ingo! Thanks for the request. Now that the first phase of integration has launched as Fivetran Activations, we're working deeper integration into Fivetran infrastructure including all of their networking support over the course of this year. Supporting proxy agent is part of that so expect more on this front in second half of 2026.
-
Hi Ingo --
I'm curious to know more about the security reasons that influenced your choice.
Would you be able to do a 15 minute call or we could do via email? -
We're in the same boat. Our security team will only allow proxy agent and not reverse ssh.
This is a blocker for us to use activations.
-
Josh --
I'd love to hear more about those security reasons re: why not RSSH and yes to Proxy.
Would you be open to sharing? -
Sure - here's a response from our cyber security team when we inquired about SSH or reverse SSH with another connector.
Option 1: (SSH to NAT Address) would show up on our insurance scans and require a lot of answering up to the insurance companies.
Option 2: (reverse SSH Tunnel) would either mean they want our SAP or another server we would stand up to SSH outbound to their company with SSH flags/options that allow a reverse tunnel back to our host/network. This would pretty much turn that host into a router for them to not only get to SAP but to anything in our whole company.
-
Very helpful Josh -- thank you! As Sean said, we are actively moving towards Proxy Agent support for Activations, and we have other significant customers interested. Sean and I will keep you posted.
-
Sounds good! Looking forward to using it!
Please sign in to leave a comment.
Comments
7 comments