inlets VS Pomerium

Thanks for the guide. Just to mention another option is https://github.com/inlets/inlets-operator

adding on to this, if OP goes down the local k8s cluster route for learning purposes, they can then hook it up to a public load balancer with this TCP tunnel thingy called inlets for a few bucks a month https://github.com/inlets/inlets-operator

Thanks! To be honest, I was thinking of a tutorial too. But then I stumbled upon the inlets-operator (the one from the visualization in the article) and its code actually looks very good in my opinion. It's concise, straightforward, and seems to be idiomatic. I do recommend taking a look at it.

Option 3: Pomerium might be an alternative as well.

That is not how you do Zero Trust. You want to use an Identity Aware Proxy. There are lots of ways you can implement this with Google as your core auth. For example Pomerium or oauth2-proxy.

I’m really surprised this sub has no love for Pomerium. I feel like it’s as simple as Caddy with all the security benefits of Traefik.

I am not sure if I understand how Pomerium works (or any identity-aware proxy).

Pomerium sidecar.

Just want to drop https://www.pomerium.com/ here. We use it at our company with ~1500 people with many apps behind the proxy. It also supports JWT for the backend, so you can integrate your apps easily without having to worry about the OAuth flow and also your apps are protected from random internet attacks.

You’ve got to protect. Anonymity is not going to work. Pomerium is another option in addition to those already suggested. https://github.com/pomerium/pomerium

I am currently looking at Wireguard/Tailscale (Wireguard based) options - early days for me so far. Also planning to look at something like Pomerium for a zero trust approach. https://www.pomerium.com/