OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.

14.4k stars3.4k forkslast commit Actively maintained

Teleport is a cloud access platform that provides identity-based access to SSH servers, Kubernetes clusters, databases and internal web apps. It enforces SSO/OIDC/SAML, short-lived certificates, role-based access, session recording and audit logging.
OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.

14.4k stars3.4k forkslast commit Actively maintained
Self-hosted transparent bastion host and PAM for SSH, HTTPS, MySQL and Postgres with RBAC, session recording, and SSO/2FA—no client-side software required.

7.7k stars356 forksApache-2.0last commit Actively maintained
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.

5k stars350 forksApache-2.0last commit Actively maintained
Open-source browser-based gateway enabling VNC, RDP, and SSH access to remote desktops without client software.

4k stars799 forksApache-2.0last commit Actively maintained
Centralized SSH gateway to remotely manage Linux servers, containers and IoT devices via web or native SSH; offers key auth, firewall rules, audit logging and session recording.

2.1k stars188 forksApache-2.0last commit Actively maintained
Single-binary TLS reverse proxy for self-hosted apps that provides SSH- and Telegram-based authorization, simple SSO, Let's Encrypt support and whitelist access control.
188 stars9 forksGPL-3.0last commit Likely dormant
Advanced SSH server and bastion that authenticates via OpenID Connect or keys, runs sessions inside Docker containers or Kubernetes pods, and supports automatic user provisioning.

83 stars2 forksApache-2.0last commit Actively maintained
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 6 of 7 shipped a commit in the last six months. Licences in this list: Apache-2.0, GPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Identity & Access Management (IAM).