A cloud-native Identity Aware Proxy and Access Control Decision service for authenticating, authorizing, and transforming HTTP requests.
Heimdall is a cloud-native Identity Aware Proxy and Access Control Decision service that authenticates, authorizes, and transforms HTTP requests for upstream applications. It solves the problem of securing modern, distributed systems by enforcing Zero Trust principles, dynamically applying rules, and integrating with existing infrastructure like proxies and ingress controllers.
DevOps engineers, platform teams, and security architects building secure, cloud-native applications who need fine-grained access control, authentication flexibility, and integration with Kubernetes or existing proxy ecosystems.
Developers choose Heimdall for its performance-focused design, dynamic rule management without redeployment, and seamless integration with popular proxies and authentication providers, offering a production-ready, extensible alternative to commercial IAP solutions.
A cloud native Identity Aware Proxy and Access Control Decision service
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Heimdall loads authentication and authorization rules from Kubernetes CRDs, cloud storage, or HTTP endpoints without requiring a restart, enabling real-time updates as stated in the dynamic rule sets feature.
It operates standalone or integrates with existing proxies like Kong, NGINX, and Traefik, allowing teams to add security layers without overhauling infrastructure, per the flexible deployment description.
Supports multiple authentication providers with fallback mechanisms and conditional execution, facilitating migration and redundancy, as highlighted in the authentication features.
Avoids HTTP routing frameworks and minimizes data conversion to reduce overhead, focusing on low latency for request processing, aligning with the performance philosophy in the README.
The README explicitly states that some features are still missing and future updates may include breaking changes, posing risks for production stability and long-term planning.
Managing rule sets via CRDs or cloud storage requires expertise in YAML and cloud-native tooling, which can steepen the learning curve compared to simpler, GUI-based solutions.
As a newer project inspired by Pomerium and Ory Oathkeeper, Heimdall might have a smaller community and fewer third-party integrations, potentially limiting support resources.
heimdall is an open-source alternative to the following products: