Multi-port TCP app access

[ravicious]

• RFD 182: Multi-port TCP app access #46169

Tasks

Beta Give feedback

1. Add the ports field to the app spec and validate it.
2. Add TargetPort to RouteToApp.
3. Route to multi-port apps based on TargetPort in the cert.
4. Set up a local proxy per local port in VNet.
5. Show the local port in Connect (port selector, in modals and notifications), validate the local port before a connection is made.
6. Expand audit events and telemetry to account for multi-port apps.
7. Add docs.

The tasks above allow the design partner to evaluate multi-port TCP app access by using it through VNet. We want to ship those changes first and then do some follow-up tasks.

Follow-ups

Beta Give feedback

1. Add multi-port support to local proxies in tsh and Connect.