TonD

TonD vs. HashiCorp Boundary

TonD is closer to Boundary than to Teleport: both provide controlled, protocol-agnostic network access to private targets through a control plane and relay or worker data plane. The difference is mainly maturity and architecture.

AreaTonDHashiCorp Boundary
Primary purposeDirect or relayed TCP access to remote endpointsIdentity-aware secure remote access broker
Data pathP2P first; central or customer SSH relay fallbackWorker-proxied sessions, including ingress/egress and multi-hop workers
Control planePython WebSocket server with in-memory registryHA stateless controllers backed by PostgreSQL
Target registrationRemote client advertises allowed protocols and portsManaged targets, host catalogs, target configuration, and worker tags
IdentityOrganization/device registration and Ed25519 proofUsers, groups, OIDC and other auth methods, roles, and grants
AuthorizationOrganization boundary plus remote-advertised protocol/portFine-grained RBAC policies over scopes, targets, sessions, and workers
CredentialsUser's normal protocol credentials remain separateCan broker/inject credentials, often integrated with Vault
ReliabilitySingle server registry; customer relay fallbackHA controllers, persistent database, worker health, and routing
Recording/auditAudit design exists; no durable implementation yetDurable audit events and optional SSH session recording
Connectivity advantageCan avoid relays entirely with encrypted P2PPredictable, managed routing across complex networks

Key distinction: TonD is an encrypted connectivity layer: it creates a local port that normal SSH, RDP, or HTTP clients use. Boundary is an access-management product: it decides who may access which target, selects a worker route, can manage credentials, and records the authorized session.

TonD's customer SSH node is conceptually nearest to a Boundary worker, but it is a fallback relay only. A Boundary worker is the normal data-plane component and supports deliberate placement, tags, multi-hop routing, health management, and scalable scheduling.

To move TonD toward Boundary, prioritize persistent organization, target, and session state; user/role RBAC; OIDC; target inventory; durable audit events; relay health/capacity scheduling; and eventually Vault-backed credential brokering.