Warpgate
Warpgate is a smart, fully transparent SSH, HTTPS, Kubernetes, database, and RDP/VNC bastion host written in Rust. It sits in front of your network and brokers access to internal services without requiring any client app or SSH wrapper on the end user’s machine, while recording every session for live viewing and later replay.
Key Features
- Transparent access — Users connect to SSH, HTTPS, Kubernetes, MySQL/PostgreSQL, and RDP/VNC targets with no client-side tooling.
- Per-user permissions — Assign each user access to exactly the hosts and URLs they need, centrally.
- Multi-factor authentication — Enforce MFA plus support for SSO, LDAP, and other identity providers.
- Session recording — Every session is recorded for live viewing or later replay from the built-in admin web UI.
- Not a jump host — Forwards connections rather than logging into intermediate boxes, so targets stay auditable and isolated.
- Privileged access management — Works like a PAM layer that sits safely in your DMZ and gates access to the internal network.
- Single binary — A single Rust binary is easy to deploy, configure, and update.
- Self-hosted — Run entirely on your own infrastructure for full control over access policy and audit data.
Why Use Warpgate?
Warpgate replaces a tangle of VPNs, jump hosts, and per-service credentials with one access-control layer. Instead of installing SSH wrappers or distributing keys, you give users a single way in and control precisely what each one can reach — with full session audits as a built-in bonus.
Use Cases
- Engineering teams that need to reach internal servers and Kubernetes clusters without exposing them publicly.
- Database administration where DBA sessions to MySQL or Postgres must be logged and scoped per user.
- Security-conscious self-hosters who want a bastion in front of their homelab services.
Platform
Linux · macOS · Windows · Docker (single Rust binary)
Licence
Apache License 2.0