Microsoft Azure
Deploy Pomerium in Azure and protect private applications across Azure environments.
Overview
Microsoft Azure is a public cloud platform. It provides virtual machines, virtual networks, Azure Kubernetes Service, databases, and other managed services.
Private Azure applications can span subscriptions and virtual networks. Pomerium provides a narrow identity-aware path to selected services.
Microsoft Azure supplies the runtime or deployment environment. Pomerium runs in that environment and supplies the identity-aware access point for selected services.
Prerequisites
- A supported Linux host that can accept the user-facing route and reach the private upstream service.
- DNS, TLS, identity-provider configuration, protected secrets, and durable storage where the selected design requires it.
How it works
Run Pomerium Core on a supported Linux host in the environment. Install the official package, standalone binary, or container. Configure DNS, TLS, identity, route policy, storage, and replicas for the selected design.
Run Pomerium Core on a supported Linux Azure virtual machine in a virtual network that can reach the private services. For workloads in Azure Kubernetes Service, use the standard Pomerium Kubernetes deployment path.
Check service health, DNS, TLS, required storage and replicas, and upstream reachability. Confirm that a direct public route cannot bypass Pomerium.
Example
A private administration application runs on an Azure virtual machine. Pomerium runs on a separate Linux virtual machine in the same virtual network and forwards only approved requests.
Considerations
- There is no Azure-native Pomerium service or Azure infrastructure installer.
- Azure identity, network controls, and Pomerium route policy remain separate systems.
