Hacker News Reader

"SaltStack"

Saltstack is either using SSH to communicate or opening it's own port. I'd much rather trust an open ssh port for securely provisioning/management than allow any other piece of software to keep a port open (upto and including TLS based protocols).

View on HN

SaltStack has an agent that communicates with a master on a different server. The agents on the clients don't need an open port (other than egress).

This allows me to have one central server that is well secured and protected that allows ingress from the remote hosts, and then all the clients reach out to the master to get their tasks.

Reply on news.ycombinator.com