Openport vs Pomerium

Openport lets users make a local TCP port reachable from the internet without opening a firewall port. It builds a tunnel between a device and the outside world for remote access, and its web service and API can show online IoT devices and manage a fleet. Access can be controlled by user groups. The `--http-forward` option assigns a hostname to a session for serving a local port over HTTP and HTTPS with a valid certificate. Custom-domain forwarding requires a CNAME record and works over HTTPS only. With TLS passthrough, TLS ends on the user's machine, keeping tunnelled traffic encrypted end to end. Forwarded ports require visitors to click a token link by default; a clicked link remains valid for 24 hours. Openport also lists brute-force blocking and port-scanning detection. It supports API, Linux, macOS, web, and Windows. Since client 2.3.0, sessions can forward UDP as well as TCP on the same port when the server supports it. The service was founded in 2014 and offers a free plan, a 30-day trial, and paid plans from $1/mo.

Pomerium is an open-source identity-aware proxy for controlling access to internal applications, servers, services, and workloads without requiring VPN client software. It checks identity, device state, and request context before granting access, and authenticates through identity providers that support OpenID Connect. Listed access scenarios include HTTP, MCP, SSH, gRPC, TCP, and UDP; supported app protocols also include HTTPS, HTTP/2, HTTP/3, and WebSocket. Pomerium removes its authentication cookies before forwarding requests upstream, and sensitive databroker data is encrypted at rest. Downstream TLS has a minimum of TLS 1.2. Deployment options include Linux and macOS binaries, packages, Docker images, source builds, and desktop clients for Windows, macOS, and Linux. The free Personal plan lists 10 users, 10 routes, five policies, and two service accounts. Business costs $7.00 per month, billed annually, and lists limits of 1,000 users, 100 routes, 100 policies, and 20 service accounts. A free trial is also listed.