Pomerium
Identity-aware reverse proxy, successor to now obsolete oauthproxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to public Internet.
Actively maintained with regular releases.
Commit activity more than 66% of tracked projects; popularity more than 66%. How this is calculated.
Commits, last 11 months
| Stars | 5k |
|---|---|
| Latest release | v0.33.3 · 9 Sept 2026 |
| Repo updated | 25 Sept 2026 |
| Licence | Apache-2.0 |
| Built with | Go, Docker |
Is Pomerium actively maintained?
Development is ongoing. The repository recorded 550 commits over the same window, and the last three months alone account for 145 of them.
The most recent tagged release, v0.33.3, shipped within the last month — a current, installable version exists today.
Pomerium ranks #9 of 19 in Web Servers, placing it mid-table for maintenance activity.
What Pomerium actually does
Pomerium is an identity-aware reverse proxy that intercepts HTTP requests to enforce authentication checks before traffic reaches your internal backend services. It acts as a gatekeeper, requiring users to authenticate via an identity provider before granting access to self-hosted applications on the public internet.
Best fit: Self-hosters who need to expose internal web applications to external users without relying solely on VPN clients.
Worth knowing: Configuring identity providers and policy rules introduces significant operational complexity compared to standard reverse proxies.
Deployment notes
As a Go application distributed via Docker, it typically runs behind a TLS termination proxy and relies on an external identity provider for session management.
Links
Alternatives to Pomerium
Projects in the same categories, ordered by health score.
Identity-aware tunneled reverse proxy with dashboard UI, access control, and WireGuard-based tunnels (alternative to Cloudflare Tunnel, Tailscale).
HTTP reverse proxy and load balancer that makes deploying microservices easy.
Next-gen Web Application Firewall (WAF) that will protect your web services.
Lightweight, simple, and performant reverse proxy with WebUI, Docker integration, automatic shutdown/startup for container based on traffic.
Docker container for managing Nginx proxy hosts with a simple, powerful interface.
Fast, memory-safe web server written in Rust.