Pomerium

Pomerium is an identity- and context-aware reverse proxy written in Go. It sits in front of internal web apps and other services, authenticates users through an OpenID Connect identity provider, and connects them without a corporate VPN. The open-source server is Pomerium Core, and the deploy guide describes installing it from a standalone binary, from deb and rpm packages, or from a container image. When installed from the OS packages, the server runs as a systemd service. Its databroker keeps state in PostgreSQL where that backend is configured.

Pomerium Zero is the vendor’s managed control plane, and every plan runs a self-hosted data plane that handles application traffic. A self-hosted control plane comes with Pomerium Enterprise, which adds an Enterprise Console, directory sync and audit logs on top of Core.