Access TCP Resource directly through TLS tunnel without local proxy

[maju-ppi]

Applies To

Maybe https://github.com/gravitational/teleport/blob/master/rfd/0039-sni-alpn-teleport-proxy-routing.md

Details

I can login to a http app and use the certificate to access it directly from my Java application using TLS (Teleport in TLS Proxy mode).
I would like to do the same with general TCP connection (e.g. sftp, but also other) by encapsulating them in a TLS tunnel directly from my application so i don't have to start a local proxy for every app i want to access.
I understand that i need to configure SNI and ALPN, but is there any documentation about this process? What do i have to do? What value is required for ALPN? How is the connection initiated?

How will we know this is resolved?

Maybe you could supply an example which does not use "tsh proxy", but e.g. stunnel or something similar?

Related Issues

I could not find any related issues.
Thanks!

[zmb3]

If your Java application is running on your workstation, then you might consider using VNet.