{"token_count": 508}

# Cluster Management

In this section, you can find guides on managing a Teleport cluster after deploying it, i.e., day-two operations.

- [Backup and Restore](https://goteleport.com/docs/zero-trust-access/management/backup-restore.md): How to back up and restore your Teleport cluster state.
- [Break-Glass Access](https://goteleport.com/docs/zero-trust-access/management/breakglass-access.md): Guide to set up break-glass emergency SSH access for critical systems if Teleport becomes unavailable.
- [Cluster Security (section)](https://goteleport.com/docs/zero-trust-access/management/security.md): Highlights recommended practices and ways to harden security for your Teleport cluster.
- [Diagnostics (section)](https://goteleport.com/docs/zero-trust-access/management/diagnostics.md): Provides guidance on monitoring your Teleport deployment and diagnosing issues.
- [External Audit Storage](https://goteleport.com/docs/zero-trust-access/management/external-audit-storage.md): Store audit logs and session recordings on your own infrastructure with Teleport Enterprise Cloud.
- [Proxy Peering Migration](https://goteleport.com/docs/zero-trust-access/management/proxy-peering.md): How to upgrade an existing Teleport cluster to Proxy Peering mode.
- [TLS Routing Migration](https://goteleport.com/docs/zero-trust-access/management/tls-routing.md): How to upgrade an existing Teleport cluster to single-port TLS routing mode.
- [Trusted Clusters](https://goteleport.com/docs/zero-trust-access/management/trustedclusters.md): Explains how you can configure a trust relationship and manage access between two Teleport clusters.
- [Workload Clusters](https://goteleport.com/docs/zero-trust-access/management/workload-clusters.md): How to create and manage Teleport Cloud workload clusters using tctl and Machine & Workload Identity