Repolode
Submit
warp-tech

warp-tech/warpgate

Self-hosted bastion host that proxies SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC access without client-side software.

Open-source alternative to:Teleport

View on GitHubWebsite
Stars
8,211
Forks
443
Open issues
271
Last commit
3 days ago

What is it?

Warpgate is a bastion host (privileged access gateway) that you deploy in a DMZ or on a bastion machine. It accepts SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC connections, authenticates users locally, then connects to the target and joins both sides together, so native clients such as ssh, kubectl or database tools work without a wrapper.

Administrators manage users and targets through a built-in web UI and assign specific users to specific hosts or URLs. Sessions can be recorded, viewed live and replayed later, and the session history is stored in SQLite. Browser-based SSH, RDP and VNC access is also included.

Security features include native 2FA with TOTP, SSO via OpenID Connect, brute-force protection with IP blocking and user lockout, and temporary access tickets. The project ships as a single Rust binary with no runtime dependencies.

Key features

  • 01Transparent proxying of SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC
  • 02Works with native clients without a custom client or SSH wrapper
  • 03Session recording with live view and replay in the admin UI
  • 04Native TOTP 2FA and OpenID Connect SSO
  • 05Brute-force protection with IP blocking and user lockout
  • 06Single binary written in safe Rust

Use cases

  • Giving engineers controlled, audited access to production servers without sharing a jump host account
  • Providing scoped access to Kubernetes clusters or databases in a DMZ
  • Enabling browser-based SSH or RDP access to internal machines
  • Recording administrator sessions for compliance review

Quick start

  1. 1

    Install the task runner Just

    cargo install just
  2. 2

    Install the admin UI dependencies

    just npm install
  3. 3

    Build the frontend

    just npm run build
  4. 4

    Build Warpgate (add --release for an optimized build)

    cargo build

Things to know

  • Building from source requires Rust, NodeJS and NPM.
  • Some release binaries are labeled beta.

Topics

#bastion-host#ssh#privileged-access-management#kubernetes#rdp#vnc#session-recording#rust#bastion#https

FAQ

What is warpgate?
Self-hosted bastion host that proxies SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC access without client-side software. Warpgate is a bastion host (privileged access gateway) that you deploy in a DMZ or on a bastion machine. It accepts SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP and VNC connections, authenticates users locally, then connects to the target and joins both sides together, so native clients such as ssh, kubectl or database tools work without a wrapper.
Is warpgate free to use? What license does it have?
warpgate is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is warpgate still maintained?
Actively maintained. The last commit to warpgate was on Nov 4, 2026.
What can I use warpgate for?
Giving engineers controlled, audited access to production servers without sharing a jump host account Providing scoped access to Kubernetes clusters or databases in a DMZ Enabling browser-based SSH or RDP access to internal machines Recording administrator sessions for compliance review
How do I install warpgate?
Install the task runner Just: cargo install just Install the admin UI dependencies: just npm install Build the frontend: just npm run build Build Warpgate (add --release for an optimized build): cargo build
Where can I get warpgate?
The source code and installation instructions are on GitHub: https://github.com/warp-tech/warpgate

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects