octelium/octelium

What it solves

Octelium is a unified zero trust secure access platform designed to replace traditional VPNs and fragmented access tools. It solves the problem of managing secure, identity-based access to private internal resources (behind NAT) and public SaaS APIs without the need to distribute long-lived secrets or open firewall ports.

How it works

It uses a scalable architecture of identity-aware proxies built on Kubernetes. It provides secure access via two primary methods: private client-based access using WireGuard/QUIC tunnels and clientless BeyondCorp-style access. The platform implements attribute-based access control (ABAC) using policy-as-code (CEL and OPA) to enforce fine-grained, per-request permissions based on identity and context.

Who it’s for

• Infrastructure Engineers: Those looking for a self-hosted alternative to ngrok, Cloudflare Tunnel, or corporate VPNs.
• AI Developers: Those building agentic meshes or MCP (Model Context Protocol) gateways that require secure, identity-managed remote access.
• Homelab Enthusiasts: Users wanting to securely expose local services (like Ollama or databases) to the internet without complex networking.
• DevOps Teams: Teams needing a PaaS-like deployment platform for containerized applications with integrated security.

Highlights

• Secretless Access: Allows users to access HTTP APIs, SSH, and databases without managing or sharing passwords and API keys.
• AI Gateway Capabilities: Provides routing, visibility, and identity-based access control for LLM providers.
• Agentic Infrastructure: Supports MCP gateways and Agent2Agent (A2A) architectures for AI agent interoperability.
• Clientless Sandboxes: Integrates with Cordium to provide isolated, reproducible sandboxes for developers and AI agents.
• Zero-Config Networking: Eliminates traditional VPN routing issues and supports dual-stack private networking via WireGuard/QUIC.