OpenSource-Hub
W

warpgate

SHA-256
7.0k stars·System Optimization·SHA-256 checksum verified

Smart SSH/HTTPS/K8s/MySQL/PostgreSQL bastion host with transparent connection forwarding and built-in 2FA/SSO.

Smart Download

Download Download Version

v0.23.4 · 47.4 MB

A transparent bastion host that needs no client config and supports SSH/HTTPS/DB proxy with full session recording.

Core Features

  • Transparent proxy: forwards connections to targets with zero client configuration
  • Native 2FA (TOTP) and SSO (OpenID Connect)
  • Full session recording for live view and replay
  • Single binary deployment, no dependencies
  • Precise 1:1 user-to-service mapping

What It Can't Do

  • •Ensure firewall ports are open for SSH, HTTPS, etc. during setup,Session recordings consume disk space; consider periodic cleanup or archival,Deployment currently supports Linux and macOS; Windows users need WSL,Lacks advanced high-availability features of Teleport Enterprise, but sufficient for small teams

Use Cases

  • Secure internal SSH/HTTPS access without VPN
  • Audited remote database access (MySQL/PostgreSQL)
  • Kubernetes API proxy with no kubectl wrapper
  • Multi-user ops session recording and compliance

Warpgate is a smart and fully transparent bastion host that doesn't require any client-side software changes. It sits in your DMZ, lets you assign users to specific hosts or URLs, records every session for live viewing and later replay, and includes native two-factor authentication (TOTP) and SSO via OpenID Connect. The entire service is a single binary with no external dependencies, written in 100% safe Rust. It supports SSH, HTTPS, Kubernetes, MySQL, and PostgreSQL protocols, making it an ideal alternative to jump hosts, VPNs, or Teleport for secure, audited access.

Tags

bastionSSHgatewaysession-recording2FASSO

Getting Started

1

Download installer

Click the button above to download the installer for your system

Linux· 47.4 MBmacOS· 41.6 MBWindows· 52.3 MB
2

Install the software

Install the appropriate package for your distro (dpkg / rpm / AppImage)

3

Step 1: Download the binary for your OS from GitHub Releases or use Docker

4

Step 2: Run 'warpgate setup' to interactively generate the config file

5

Step 3: Start the warpgate service (admin UI on port 8888 by default)

Install Guide
  1. Step 1: Download the binary for your OS from GitHub Releases or use Docker
  2. Step 2: Run 'warpgate setup' to interactively generate the config file
  3. Step 3: Start the warpgate service (admin UI on port 8888 by default)
File Integrity

SHA-256 checksum verified

Checksum extracted from GitHub official Release page

SHA256 Checksum

2d608004086b9c1f225a1ebe09d740b941e3e5f5eeb67f473d6daf554e41766f

This checksum is extracted from the GitHub Release page. Verify file integrity after download.

All SHA-256 checksums on this platform are extracted from the project's official GitHub Release page, without any modification. You can independently verify them on the GitHub Releases page.

Open Source Transparency

View GitHub Source
Environment Guide

Uninstall Info

Stop the Warpgate process, delete the binary and config directory (/etc/warpgate and /var/lib/warpgate). For Docker, remove containers and volumes.

No Extra Dependencies

Ready to use after download. No additional runtime required.

Project Info
LicenseApache-2.0
Last Updated2026-06-27 11:15:14
GitHub Repository

Having issues? Check the FAQ below

3 FAQs

Similar Projects

P

PowerToys

A set of utilities for power users to tune and streamline their Windows experience for greater productivity.

T

terminal

Modern, feature-rich terminal application for Windows command-line users, with tabs, GPU acceleration, and full customization.

C

core

Open source home automation that puts local control and privacy first. Perfect for Raspberry Pi or a local server.