pritunl/pritunl
Pritunl
Pritunl is an enterprise VPN gateway and server manager used to deploy and configure OpenVPN and WireGuard servers through a centralized web interface. It functions as a VPN access control system and an SSH certificate authority, issuing short-lived signed certificates to manage secure shell access and network entry without manual public key distribution.
The platform acts as an SSO integrated VPN controller, synchronizing user access and organization mapping with third-party identity providers via OAuth, OIDC, and SAML. It supports high-availability deployments by using database-backed cluster synchronization across multiple server hosts to ensure continuous remote access.
The system covers broad administrative capabilities including multi-factor authentication workflows, reverse proxy gateway access for internal services, and policy-driven role management. It incorporates security measures such as non-root process isolation and dynamic firewall port restriction.
Features
- VPN Server Managers - Provides a centralized web interface for managing VPN server configurations, user roles, and network settings.
- High Availability Clustering - Supports distributed server clusters with shared databases to ensure continuous remote access and fault tolerance.
- Multi-Protocol VPN Gateways - Functions as a multi-protocol gateway supporting OpenVPN and WireGuard for enterprise remote access.
- Multi-Protocol VPN Support - Provides integrated support for both OpenVPN and WireGuard protocols to ensure connectivity across diverse network environments.
- WireGuard Management - Provides a web-based interface for configuring and monitoring WireGuard and OpenVPN server tunnels.
- WireGuard VPN Support - Establishes secure network tunnels using the WireGuard protocol for high-performance remote connectivity.
- Certificate Authorities - Generates and signs short-lived certificates to manage secure shell access across a fleet of servers.
- Short-Lived Access Certificates - Implements a system for issuing short-lived signed certificates that embed user roles for secure network and shell access.
- SSH Certificate Authorities - Acts as a central authority issuing short-lived certificates for secure server access without manual public key distribution.
- Access Control Systems - Evaluates connection eligibility through a policy engine managing user roles, MFA, and device authorization.
- SSO-Integrated Access Controls - Orchestrates VPN access by synchronizing user roles and organization mapping with OIDC and SAML providers.
- Single Sign-On Integrations - Connects VPN access to identity providers like Okta, Azure AD, and Google for centralized authentication.
- Third-Party Identity Integrations - Delegates user identity verification to external SSO providers via OAuth, OIDC, and SAML flows.
- Database-Backed Configurations - Uses a shared database to store and synchronize configurations across multiple server hosts for high availability.
- Authenticated Service Gateways - Offers authenticated browser-based access to internal network services by proxying traffic through a secure gateway.
- Multi-Factor Authentication - Secures network entry by requiring hardware keys or third-party identity verification as secondary authentication.
- Overlay Networks - Comprehensive VPN server supporting multiple tunneling protocols.
Star history
How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
