Pomerium
LightNews LightNews
banner
pomerium.io
Pomerium
@pomerium.io
74 followers 4 following 140 posts
Pomerium is an open-source identity and context-aware access proxy for building secure connections to internal resources
Posts Replies Media Videos
Pinned
pomerium.io
Pomerium @pomerium.io · 14d
New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required.

www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz
Self-Healing File-Based Databroker Without The Postgres Headaches
www.pomerium.com
pomerium.io
Sometimes Postgres isn't the Answer. Pomerium v0.31 introduces a new file-based storage option for it's databroker using Pebble, a key-value store, with Raft clustering as an alternative to Postgres.

Why? At scale, Postgres can be harder to operate.

www.pomerium.com/blog/sometim...
Sometimes Postgres isn’t the Answer
Pomerium v0.31 introduces a new Raft-based databroker option that is simpler, faster, and self-healing than the previous Postgres-based version.
www.pomerium.com
November 7, 2025 at 3:50 PM
Reposted by Pomerium
nickyt.online
Great video from Filip Lebiecki on @pomerium.io's native SSH capabilities! youtu.be/GuAvZZR0YSE

"...  it feels well effortless. And the seemingly simple new approach,the one that makes secure SSH feel so smooth ..."

Go smash that subscribe button on Filip's YouTube! #ZeroTrust #IAP #SSH #Security
OAuth2 Proxy: Secure Your Web App with Google Login (Easy!)
YouTube video by LinuxCloudHacks
youtu.be
November 6, 2025 at 5:23 PM
pomerium.io
Hard blanket recs are hard: Cost of consistency? Maybe a couple of users log out. Self-healing, eventually consistent is the goal. #Data #DataBroker #Raft
October 31, 2025 at 4:32 PM
pomerium.io
Health and readiness checks are often overlooked but crucial for zero-downtime scaling. Making your K8s cluster or on-prem environment operate reliably is surprisingly difficult.

Read how we optimized readiness checks in Pomerium: www.pomerium.com/blog/designi... #DevOps #Kubernetes #HealthChecks
Smarter Health Checks for Zero-Downtime Deployments
Why traditional health checks fail and how Pomerium built smarter, stack-aware probes for Kubernetes, Docker, and systemd.
www.pomerium.com
October 30, 2025 at 8:57 PM
pomerium.io
Raft is production-ready. Etcd (Kubernetes' storage) and HashiCorp use it. Nomad, Vault, CockroachDB and other modern SQL DBs rely on Raft for consistency across instances. Consistency comes at a cost. #Databases #Raft #DistributedSystems #Etcd #Kubernetes
October 30, 2025 at 4:26 PM
pomerium.io
The database selection meme is generally true - PostgreSQL to fancy solutions back to PostgreSQL. We'll keep supporting Postgres, but we're also exploring new approaches for data storage that go beyond the traditional cycle. #DatabaseArchitecture #DataStorage #systemDesign
October 29, 2025 at 4:33 PM
pomerium.io
Pomerium's data broker storage evolution: Started with cookies, moved to Redis, then PostgreSQL. Now adding file-based storage with clustering and leader election for self-healing, eventually consistent systems. Sometimes the simple solution wins. #DistributedSystems #DataArchitecture #ZeroTrust
October 29, 2025 at 12:18 AM
pomerium.io
New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required.

www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz
Self-Healing File-Based Databroker Without The Postgres Headaches
Stay up to date with Pomerium news and announcements.
www.pomerium.com
October 28, 2025 at 4:59 PM
pomerium.io
New in Pomerium 0.31: A self-healing file-based Databroker with no Postgres required.

www.pomerium.com/blog/self-he... #IdentityAwareProxy #ZeroTrust #authn #authz
Self-Healing File-Based Databroker Without The Postgres Headaches
www.pomerium.com
October 28, 2025 at 4:31 PM
pomerium.io
Pomerium's IAP architecture: We separate concerns into authentication,proxy & authorization services. Each handles a specific role: login,request forwarding & access control. Our data broker evolved from early cookie-based session storage to coordinate between components. #DataBroker #ZeroTrust #IAP
October 27, 2025 at 4:27 PM
pomerium.io
Flipping the switch doesn’t mean a Kubernetes pod is ready. With Pomerium, it also needs group memberships and policy data before it can serve traffic. Readiness probes make sure pods are truly ready, not just turned on. #Kubernetes #Pomerium #DevOps #CloudNative
October 24, 2025 at 4:33 PM
pomerium.io
Kubernetes: “All systems go.” Users: “Nothing works.” #Kubernetes #CloudNative #DevOps

cloudnativenow.com/contributed-...
When “Healthy” Isn’t Healthy: Rethinking Kubernetes Health Checks for Real-World Systems
Learn how to design smarter, context-aware probes that reflect true Kubernetes application health and prevent downtime.
cloudnativenow.com
October 23, 2025 at 6:41 PM
pomerium.io
Kubernetes uses health probes to keep apps alive. Startup gets things booted, readiness controls traffic, and liveness restarts stuck pods. Self-healing in action. #Kubernetes #DevOps #CloudNative #Containers
October 23, 2025 at 4:26 PM
pomerium.io
Startup probes let your app boot. Readiness probes control traffic. Liveness probes restart it when stuck. Together they keep apps stable. #Kubernetes #DevOps #HealthChecks
October 22, 2025 at 4:32 PM
pomerium.io
New in Pomerium 0.31, smarter health checks for zero-downtime deployments #kubernetes #HealthChecks #DevOps

www.pomerium.com/blog/smarter...
Smarter Health Checks for Zero-Downtime Deployments
www.pomerium.com
October 21, 2025 at 5:44 PM
pomerium.io
Next month, the Pomerium team is headed to Atlanta for KubeCon North America!
Stop by Booth 951, and pick up some cool swag, demos, and discussions about security and Kubernetes while you're there.
October 21, 2025 at 4:15 PM
pomerium.io
Kubernetes health checks prevent bad pods from breaking production by pulling them out of service until they are healthy.

#Kubernetes #DevOps #CloudNative #HealthChecks
October 21, 2025 at 1:13 PM
pomerium.io
Thank You @allthingsopen.bsky.social for an incredible two days of meeting the community!
Up next: KubeCon NA in Atlanta.

In the meantime, keep an eye out for @nickyt.online's talks and guest appearances on various podcasts!
October 17, 2025 at 4:15 PM
pomerium.io
@erinmikail.bsky.social, Senior DX Engineer, joins @nickyt.online to discuss Agent frameworks and making them reliable.

Join us on Wednesday, October 22 at 12:15PM ET:
youtube.com/live/t_QHKdS...
October 16, 2025 at 7:41 PM
pomerium.io
All Things Open, you've been amazing to us! We're so excited for Day 2.

Find us at Booth 85 for some fun conversations, stickers, and more.

Catch @nickyt.online's talk today at 1:45 PM:
Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads.
🏛️ Security – Room 303
October 14, 2025 at 3:15 PM
pomerium.io
We had a great time at the pre-@allthingsopen.bsky.social speed networking event that we co-hosted with @torc.dev @digitalocean.com @coderabbitai.bsky.social yesterday!

If you're at All Things Open, make sure to stop by our 85 booth (in front of Ballroom A) today for some epic swag!
October 13, 2025 at 1:18 PM
Reposted by Pomerium
nickyt.online
MCP uses OAuth scopes for authorization, but they’re often coarse. You can add finer scopes or step-up auth, but there’s still no built-in way to dynamically enforce policy at the tool-operation level. That’s where @pomerium.io comes in. 👀 #mcp #agenticai
October 8, 2025 at 12:26 PM
pomerium.io
Don’t miss @nickyt.online talks at ATO!

Agentic Access: OAuth Gets You In. Zero Trust Keeps You Safe
📅 Monday, Oct 13 @ 11:30 AM
🏛️Case Study/Demo 1 – Room 306 A

Kubernetes Without Borders: Building Zero Trust Security for Dynamic Workloads.
📅 Tuesday, Oct 14 @ 1:45 PM
🏛️ Security – Room 303
October 8, 2025 at 3:58 PM
pomerium.io
Headed to All Things Open? Want to meet other attendees before the official conference?
Pomerium is co-hosting a networking event on Sunday, October 12 that you do not want to miss.

Spots are limited! Sign up today.
guild.host/events/torc-...
Torc, DigitalOcean and Pomerium and CodeRabbit pre ATO meetup speed networking event | Guild
Oct 12th 7:00PM: Ready to hit the ground running at All Things Open? Skip the awkward first-day introductions and join us for a fun, fast-pa
guild.host
October 2, 2025 at 3:45 PM
pomerium.io
The Pomerium team is heading to Raleigh for
@allthingsopen.bsky.social!

Swing by Booth 84 to chat about #opensource and #security with us—and catch some demos and new swag while you’re here.

PS: @nickyt.online will be doing some cool talks on #kubernetes and #oauth that you do not want to miss!
September 29, 2025 at 10:18 PM