4 repositorios
Awesome GitHub RepositoriesGroup-Based
Configurations that define access permissions based on group membership.
Distinct from Access Rules: Distinct from Access Rules: focuses on group-based targeting rather than generic path-based rules.
Explore 4 awesome GitHub repositories matching software engineering & architecture · Group-Based. Refine with filters or upvote what's useful.
Awesome Group-Based GitHub Repositories
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- netbirdio/netbird
netbirdio/netbird
26,188Ver en GitHubNetBird is a zero-trust networking platform that builds secure, encrypted peer-to-peer overlay networks using the WireGuard protocol. It functions as a software-defined perimeter, connecting distributed infrastructure across cloud environments and physical locations while hiding network resources from the public internet. By integrating with external identity providers, the platform enforces granular access control and identity-based segmentation for every user and device. The platform distinguishes itself through extensive automation and programmatic management capabilities. It provides a ce
Assigns network access configurations to specific device sets using organizational tags to enforce team-based policies.
Gogolangmeshmesh-networks - slackhq/nebula
slackhq/nebula
17,405Ver en GitHubNebula is a scalable, decentralized overlay networking tool designed to create secure, encrypted peer-to-peer connections between distributed hosts. By utilizing a certificate-based identity authority, it enables the construction of private communication fabrics across disparate physical infrastructures, such as multiple cloud providers or on-premises data centers, without requiring central authentication servers. The project distinguishes itself through a zero-trust architecture that enforces granular, policy-driven firewall filtering based on certificate-derived group memberships. It facili
Restricts communication between nodes using certificate-based security groups to enforce expressive and provider-agnostic access control policies.
Go - firezone/firezone
firezone/firezone
8,701Ver en GitHubFirezone is a zero trust network access platform that uses WireGuard to provide identity-based connectivity to internal network resources. It functions as a virtual private network that synchronizes authentication and user groups via OpenID Connect providers. The system implements a group-based access control engine to enforce least privilege by restricting network resources to specific user groups. It utilizes holepunching and relay protocols for NAT traversal to establish encrypted tunnels through firewalls without requiring inbound ports. The platform includes a control plane for managing
Enforces least privilege by restricting network resource availability based on identity provider group memberships.
Elixirclouddevsecopselixir - kanidm/kanidm
kanidm/kanidm
4,595Ver en GitHubKanidm is a centralized identity management server designed to handle authentication, authorization, and directory services across distributed infrastructure. It provides a comprehensive framework for managing human and service accounts, utilizing a schema-driven database to store identity records, group memberships, and system attributes. The platform supports a wide range of authentication methods, including passkeys, passwords, and standard protocols like OAuth2, OIDC, LDAP, and RADIUS. The system distinguishes itself through a granular access control engine that enforces security policies
Simplifies security administration by defining access rules using group-based targets.
Rustauthenticationiamidentity
