Ansible/WinRM vs SSH

WinRM vs SSH

Connecting to Windows nodes

Ansible connects to POSIX managed nodes using OpenSSH by default. Windows nodes can also use SSH but historically they use WinRM as the connection transport. The supported connection plugins that can be used with Windows nodes are:

• PowerShell Remoting over WinRM - psrp [1]
• SSH - ssh [2]
• Windows Remote Management - winrm [3]

"When choosing between WinRM (Windows Remote Management) and SSH (Secure Shell) to manage Windows hosts with Ansible, your decision hinges on your network architecture, security policies, and performance needs. Historically, WinRM has been the standard default, but SSH has gained official production-ready support in newer Ansible versions"

Direct Comparison Overview

Feature                WinRM (Default/Traditional)       SSH (Modern Alternative)
------------------------------------------------------------------------------------------------------

Official Ansible       Mature & natively supported       Fully supported as of Ansible 2.18
Support                for year

File Transfer Speed    Slower (due to XML/SOAP overhead)  Significantly faster (up to 5–10x)

Authentication Keys    Complex (requires X.509 certs)     Simple (SSH Key pairs)

Active Directory /     Deep, native integration           Complex setup required for ticket granting
Kerberos

Network Ports          5985 (HTTP) / 5986 (HTTPS)         22 (Standard SSH)

Target OS              Enabled by default on              Requires Windows Server 2019+
Requirements           Windows Server 2012+               or manual setup