Azure VPN Gateway vs Pomerium

Azure VPN Gateway provides VPN access and site-to-site networking with advanced administrative controls. Listed capabilities include SSO and SCIM, device posture checks, and audit logs. Supported platforms and access routes include Windows, macOS, Linux, iOS, Android, a web portal, Azure CLI, and REST API. The service has no free plan, and the listed plan groups specify different bandwidth and tunnel limits. Basic lists 100 Mbps, 10 site-to-site tunnels, and 128 point-to-site tunnels. VpnGw1–VpnGw5 lists bandwidth from 650 Mbps to 10 Gbps, up to 100 site-to-site tunnels, and up to 10,000 point-to-site tunnels. VpnGw1AZ–VpnGw5AZ lists the same bandwidth range and tunnel ceilings. No plan prices are listed here.

Pomerium is an open-source identity-aware proxy for controlling access to internal applications, servers, services, and workloads without requiring VPN client software. It checks identity, device state, and request context before granting access, and authenticates through identity providers that support OpenID Connect. Listed access scenarios include HTTP, MCP, SSH, gRPC, TCP, and UDP; supported app protocols also include HTTPS, HTTP/2, HTTP/3, and WebSocket. Pomerium removes its authentication cookies before forwarding requests upstream, and sensitive databroker data is encrypted at rest. Downstream TLS has a minimum of TLS 1.2. Deployment options include Linux and macOS binaries, packages, Docker images, source builds, and desktop clients for Windows, macOS, and Linux. The free Personal plan lists 10 users, 10 routes, five policies, and two service accounts. Business costs $7.00 per month, billed annually, and lists limits of 1,000 users, 100 routes, 100 policies, and 20 service accounts. A free trial is also listed.