Affected by 
README
¶
Pomerium is an identity-aware proxy that enables secure access to internal applications. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in. Pomerium gateways both internal and external requests, and can be used in situations where you'd typically reach for a VPN.
Pomerium can be used to:
- provide a single-sign-on gateway to internal applications.
- enforce dynamic access policy based on context, identity, and device state.
- aggregate access logs and telemetry data.
- a VPN alternative.
Docs
For comprehensive docs, and tutorials see our documentation.
Directories
¶
| Path | Synopsis |
|---|---|
|
Package authenticate is a pomerium service that handles user authentication and refersh (AuthN).
|
Package authenticate is a pomerium service that handles user authentication and refersh (AuthN). |
|
Package authorize is a pomerium service that is responsible for determining if a given request should be authorized (AuthZ).
|
Package authorize is a pomerium service that is responsible for determining if a given request should be authorized (AuthZ). |
|
evaluator
Package evaluator defines a Evaluator interfaces that can be implemented by a policy evaluator framework.
|
Package evaluator defines a Evaluator interfaces that can be implemented by a policy evaluator framework. |
|
evaluator/mock_evaluator
Package mock_evaluator is a generated GoMock package.
|
Package mock_evaluator is a generated GoMock package. |
|
evaluator/opa
Package opa implements the policy evaluator interface to make authorization decisions.
|
Package opa implements the policy evaluator interface to make authorization decisions. |
|
Package cache is a pomerium service that handles the storage of user session state.
|
Package cache is a pomerium service that handles the storage of user session state. |
|
cmd
|
|
|
Package config is a configuration abstraction that facilitates enabling Pomerium settings forvarious encoding types (JSON/YAML/ENVARS) and methods.
|
Package config is a configuration abstraction that facilitates enabling Pomerium settings forvarious encoding types (JSON/YAML/ENVARS) and methods. |
|
integration
|
|
|
backends/httpdetails
Module
|
|
|
backends/ws-echo
Module
|
|
|
internal
|
|
|
cryptutil
Package cryptutil provides cryptographic utility functions, complementing the lower level abstractions found in the standard library.
|
Package cryptutil provides cryptographic utility functions, complementing the lower level abstractions found in the standard library. |
|
encoding
Package encoding defines interfaces shared by other packages that convert data to and from byte-level and textual representations.
|
Package encoding defines interfaces shared by other packages that convert data to and from byte-level and textual representations. |
|
encoding/ecjson
Package ecjson represents encrypted and compressed content using JSON-based
|
Package ecjson represents encrypted and compressed content using JSON-based |
|
encoding/jws
Package jws represents content secured with digitalsignatures using JSON-based data structures as specified by rfc7515
|
Package jws represents content secured with digitalsignatures using JSON-based data structures as specified by rfc7515 |
|
encoding/mock
Package mock implements a mock implementation of MarshalUnmarshaler.
|
Package mock implements a mock implementation of MarshalUnmarshaler. |
|
fileutil
Package fileutil provides file utility functions, complementing the lower level abstractions found in the standard library.
|
Package fileutil provides file utility functions, complementing the lower level abstractions found in the standard library. |
|
frontend
Package frontend handles the generation, and instantiation of Pomerium's html templates.
|
Package frontend handles the generation, and instantiation of Pomerium's html templates. |
|
grpc
Package grpc provides gRPC utility functions, complementing the more common ones in the github.com/grpc/grpc-go package
|
Package grpc provides gRPC utility functions, complementing the more common ones in the github.com/grpc/grpc-go package |
|
grpc/authorize/client
Package client implements a gRPC client for the authorization service.
|
Package client implements a gRPC client for the authorization service. |
|
grpc/cache/client
Package client implements a gRPC client for the cache service.
|
Package client implements a gRPC client for the cache service. |
|
grpcutil
Package grpcutil contains utility functions for working with gRPC.
|
Package grpcutil contains utility functions for working with gRPC. |
|
httputil
Package httputil provides HTTP utility functions, complementing the more common ones in the net/http package
|
Package httputil provides HTTP utility functions, complementing the more common ones in the net/http package |
|
identity
Package identity provides support for making OpenID Connect (OIDC) and OAuth2 authenticated HTTP requests with third party identity providers.
|
Package identity provides support for making OpenID Connect (OIDC) and OAuth2 authenticated HTTP requests with third party identity providers. |
|
kv
Package kv defines a Store interfaces that can be implemented by datastores to provide key value storage capabilities.
|
Package kv defines a Store interfaces that can be implemented by datastores to provide key value storage capabilities. |
|
kv/autocache
Package autocache implements a key value store (kv.Store) using autocache which combines functionality from groupcache, and memberlist libraries.
|
Package autocache implements a key value store (kv.Store) using autocache which combines functionality from groupcache, and memberlist libraries. |
|
kv/bolt
Package bolt implements a key value store (kv.Store) using bbolt.
|
Package bolt implements a key value store (kv.Store) using bbolt. |
|
kv/redis
Package redis implements a key value store (kv.Store) using redis.
|
Package redis implements a key value store (kv.Store) using redis. |
|
log
Package log provides a global logger for zerolog.
|
Package log provides a global logger for zerolog. |
|
middleware
Package middleware provides a standard set of middleware for pomerium.
|
Package middleware provides a standard set of middleware for pomerium. |
|
middleware/responsewriter
Package responsewriter contains helper functions that useful for hooking into various parts of a response.
|
Package responsewriter contains helper functions that useful for hooking into various parts of a response. |
|
sessions
Package sessions handles the storage, management, and validation of pomerium user sessions.
|
Package sessions handles the storage, management, and validation of pomerium user sessions. |
|
sessions/cache
Package cache provides a remote cache based implementation of session store and loader.
|
Package cache provides a remote cache based implementation of session store and loader. |
|
sessions/cookie
Package cookie provides a cookie based implementation of session store and loader.
|
Package cookie provides a cookie based implementation of session store and loader. |
|
sessions/header
Package header provides a request header based implementation of a session loader.
|
Package header provides a request header based implementation of a session loader. |
|
sessions/mock
Package mock provides a mock implementation of session store and loader.
|
Package mock provides a mock implementation of session store and loader. |
|
sessions/queryparam
Package queryparam provides a query param based implementation of a both as session store and loader.
|
Package queryparam provides a query param based implementation of a both as session store and loader. |
|
telemetry/metrics
Package metrics contains support for OpenCensus distributed metrics.
|
Package metrics contains support for OpenCensus distributed metrics. |
|
telemetry/trace
Package trace contains support for OpenCensus distributed tracing.
|
Package trace contains support for OpenCensus distributed tracing. |
|
tripper
Package tripper provides utility functions for working with the http.RoundTripper interface.
|
Package tripper provides utility functions for working with the http.RoundTripper interface. |
|
urlutil
Package urlutil provides utility functions for working with go urls.
|
Package urlutil provides utility functions for working with go urls. |
|
version
Package version enables setting build-time version using ldflags.
|
Package version enables setting build-time version using ldflags. |
|
Package proxy is a pomerium service that provides reverse proxying of internal routes.
|
Package proxy is a pomerium service that provides reverse proxying of internal routes. |
Click to show internal directories.
Click to hide internal directories.