Warpgate
lastmod 2026-05-31created 2025-09-182 edits
Fully transparent SSH, HTTPS, Kubernetes, MySQL and Postgres bastion/PAM that doesn't need additional client-side software
Open-source, fully transparent Bastion/PAM solution
About
- A bastion host and PAM solution that transparently relays SSH, HTTPS, MySQL, and PostgreSQL connections, with no separate client installation needed
- Deploy it in the DMZ, then create user accounts and easily map them to specific hosts and URLs within the network
- All sessions are recorded in a form that can be monitored in real time and replayed, and can be viewed in the admin web UI
- Not just a simple jump host: it forwards connections fully transparently, and the client side is unaware of the intermediate step
- Supports 2FA and SSO (OpenID Connect, TOTP) out of the box, and runs as a single binary written in 100% Safe Rust with no dependencies
- Tech stack
- Backend: Rust. HTTP(poem-web) + DB(SQLite (sea-orm, sqlx)) + SSH(russh)
- Frontend: TypeScript + Svelte + Bootstrap