Pomerium

Pomerium

@pomerium.io

Pomerium is an open-source identity and context-aware access proxy for building secure connections to internal resources

109 followers8 following165 posts

Pinned

Pomerium
@pomerium.io

The latest interactive tutorial just dropped! See mTLS-based access policies in action: authenticate machine callers, authorize by fingerprint, verify logs, revoke access, & rotate credentials without downtime. CI is the example workload. #mTLS #ZeroTrust #DevSecOps go.pomerium.com/mtls-tutoria...

go.pomerium.comSecure Machine-to-Machine Access with mTLS and Pomerium | iximiuz LabsRun a GitHub Actions-compatible continuous integration (CI) job on a private runner and protect its internal API call with mutual TLS (mTLS) and Pomerium. Build separate server and client trust chains...
Pomerium
@pomerium.io

In case you missed it, the full free MCP course from Pomerium is now live! Get hands-on with securing MCP servers and MCP apps, from local development to production. Start here: go.pomerium.com/mcp-course?u... #MCP #MCPApps #AI #ZeroTrust #Pomerium

go.pomerium.comSecuring MCP Servers and MCP Apps with Pomerium (course) | iximiuz LabsA hands-on course on securing Model Context Protocol (MCP) servers and MCP apps with Pomerium, covering OAuth 2.1, upstream OAuth to APIs like GitHub, and per-user, per-tool authorization from dev to ...
Pomerium
@pomerium.io

New hands-on tutorial: Native SSH Access with Pomerium. Context-aware authorization in front of any SSH server. No tunnels, no custom client, no per-user keys. Remove a user from policy and their active session ends, not just future ones. usepom.link/ssh-tutorial #ZeroTrust #SSH #DevOps

usepom.linkNative SSH Access with Pomerium | iximiuz LabsPomerium can be used as a native SSH reverse proxy, adding OAuth authentication and flexible Pomerium policy enforcement to standard SSH connections, without the need for tunnels, or custom clients or...

Pomerium reposted

Nick Taylor
@nickyt.online

Day 2 of KubeCon! Come say hello to the Pomerium crew in hall 1, booth #986. Come for some socks, stay for the ingress! #KubeCon

Pomerium
@pomerium.io

Come find us at booth 986 at KubeCon next week. We'll be talking native SSH, securing MCP servers for AI agents and more. See you in Amsterdam! #kubecon #zerotrust #mcp #ssh

Pomerium
@pomerium.io

Join Nick and Jim in 30 minutes as they dig into real-time guardrails for AI agents!

Pomerium@pomerium.io

Join @jimbobbennett.dev from Galileo and @nickyt.online as they dig into real-time guardrails for AI agents December 11th. 👀 www.youtube.com/watch?v=4cqR... #AI #AIGuardrails #AgenticAI

youtube.comReal-Time Guardrails for AI AgentsJim Bennett, principal developer advocate at Galileo, joins Nick Taylor to discuss real-time guardrails for AI to provide more boundary layers.
Pomerium
@pomerium.io

Sometimes Postgres isn't the Answer. Pomerium v0.31 introduces a new file-based storage option for it's databroker using Pebble, a key-value store, with Raft clustering as an alternative to Postgres. Why? At scale, Postgres can be harder to operate. www.pomerium.com/blog/sometim...

pomerium.comSometimes Postgres isn’t the AnswerPomerium v0.31 introduces a new Raft-based databroker option that is simpler, faster, and self-healing than the previous Postgres-based version.
Pomerium
@pomerium.io

Hard blanket recs are hard: Cost of consistency? Maybe a couple of users log out. Self-healing, eventually consistent is the goal. #Data #DataBroker #Raft

Pomerium
@pomerium.io

Health and readiness checks are often overlooked but crucial for zero-downtime scaling. Making your K8s cluster or on-prem environment operate reliably is surprisingly difficult. Read how we optimized readiness checks in Pomerium: www.pomerium.com/blog/designi... #DevOps #Kubernetes #HealthChecks

pomerium.comSmarter Health Checks for Zero-Downtime DeploymentsWhy traditional health checks fail and how Pomerium built smarter, stack-aware probes for Kubernetes, Docker, and systemd.
Pomerium
@pomerium.io

Raft is production-ready. Etcd (Kubernetes' storage) and HashiCorp use it. Nomad, Vault, CockroachDB and other modern SQL DBs rely on Raft for consistency across instances. Consistency comes at a cost. #Databases #Raft #DistributedSystems #Etcd #Kubernetes

Pomerium
@pomerium.io

The database selection meme is generally true - PostgreSQL to fancy solutions back to PostgreSQL. We'll keep supporting Postgres, but we're also exploring new approaches for data storage that go beyond the traditional cycle. #DatabaseArchitecture #DataStorage #systemDesign

Pomerium
@pomerium.io

Pomerium's data broker storage evolution: Started with cookies, moved to Redis, then PostgreSQL. Now adding file-based storage with clustering and leader election for self-healing, eventually consistent systems. Sometimes the simple solution wins. #DistributedSystems #DataArchitecture #ZeroTrust

Pomerium
@pomerium.io

Pomerium's IAP architecture: We separate concerns into authentication,proxy & authorization services. Each handles a specific role: login,request forwarding & access control. Our data broker evolved from early cookie-based session storage to coordinate between components. #DataBroker #ZeroTrust #IAP

Pomerium
@pomerium.io

Flipping the switch doesn’t mean a Kubernetes pod is ready. With Pomerium, it also needs group memberships and policy data before it can serve traffic. Readiness probes make sure pods are truly ready, not just turned on. #Kubernetes #Pomerium #DevOps #CloudNative

Pomerium
@pomerium.io

Kubernetes uses health probes to keep apps alive. Startup gets things booted, readiness controls traffic, and liveness restarts stuck pods. Self-healing in action. #Kubernetes #DevOps #CloudNative #Containers

Pomerium
@pomerium.io

Startup probes let your app boot. Readiness probes control traffic. Liveness probes restart it when stuck. Together they keep apps stable. #Kubernetes #DevOps #HealthChecks