FreeBSD

Overview

The FreeBSD operating system is an open-source operating system for servers, desktops, and embedded platforms. Organizations can run private web applications, administration tools, APIs, and network services on FreeBSD systems.

A service can run on FreeBSD without being safe to expose directly. An adjacent Pomerium deployment can verify identity and policy before the request reaches it.

FreeBSD supplies the protected service, client, or surrounding network. Pomerium runs on a supported adjacent platform and supplies the identity-aware access point.

Prerequisites

• A supported Pomerium host, container platform, or Kubernetes cluster that can accept the user-facing route and reach the private service in the adjacent environment.
• DNS, TLS, identity-provider configuration, and route policy for the selected application.

How it works

Place Pomerium Core on a supported host, container platform, or Kubernetes cluster next to the environment. The Pomerium deployment must accept the user-facing route and reach the private service.

Pomerium does not publish an official FreeBSD binary or package. Run Pomerium Core on a supported Linux or macOS host, in a supported container environment, or in a connected Kubernetes cluster. Place it where it can reach the FreeBSD service.

Test reachability from the Pomerium host to the private upstream. Then confirm that a direct public route cannot bypass Pomerium.

Example

A private operations console runs on a FreeBSD server. Pomerium runs on a Linux gateway in the same network and forwards only approved requests to the console.