Ansible/WinRM vs SSH

SSH

Some of the benefits of using SSH over the WinRM based transports are:

• SSH can be easier to configure in non-domain environments
• SSH supports key based authentication which is simpler to manage than certificates
• SSH file transfers are faster than WinRM

See https://docs.ansible.com/projects/ansible/latest/os_guide/windows_ssh.html#windows-ssh

Setup see Ansible/SSH

WinRM vs SSH

Connecting to Windows nodes

Ansible connects to POSIX managed nodes using OpenSSH by default. Windows nodes can also use SSH but historically they use WinRM as the connection transport. The supported connection plugins that can be used with Windows nodes are:

• PowerShell Remoting over WinRM - psrp [1]
• SSH - ssh [2]
• Windows Remote Management - winrm [3]

"When choosing between WinRM (Windows Remote Management) and SSH (Secure Shell) to manage Windows hosts with Ansible, your decision hinges on your network architecture, security policies, and performance needs. Historically, WinRM has been the standard default, but SSH has gained official production-ready support in newer Ansible versions"

Direct Comparison Overview

Feature                WinRM (Default/Traditional)       SSH (Modern Alternative)
------------------------------------------------------------------------------------------------------

Official Ansible       Mature & natively supported       Fully supported as of Ansible 2.18
Support                for year

File Transfer Speed    Slower (due to XML/SOAP overhead)  Significantly faster (up to 5–10x)

Authentication Keys    Complex (requires X.509 certs)     Simple (SSH Key pairs)

Active Directory /     Deep, native integration           Complex setup required for ticket granting
Kerberos

Network Ports          5985 (HTTP) / 5986 (HTTPS)         22 (Standard SSH)

Target OS              Enabled by default on              Requires Windows Server 2019+
Requirements           Windows Server 2012+               or manual setup