A proof of concept Software Defined Perimeter (SDP) implementation using OpenSPA for service hiding.
Currently being a PoC, OpenSDP supports only service discovery for OpenSPA protected services.
- Each service is protected by an OpenSPA server
- Clients not knowing where OpenSPA hidden services are contact the OpenSDP server for service discovery over mutual TLS
- Clients are then free to perform the OpenSPA handshake with all services that they are authorized
Currently it's only possible to define services and the clients ACL using a series of YAML files. This is planned to change in the coming releases.
Currently there are two commands: services and access.
Returns a list of authorized services.
This command is used to acquire access to a service.
You can use it by specifying the service name, eg. ./openspa-client access example-www.
It is also possible to acquire access to all authorized services (returned using the services command) using the command line flag -a.
A tutorial how to setup OpenSDP with a working OpenSPA installation is available here.
- Add logging to server
- Add timeout if HTTP request is taking too long
This software is licensed under: GNU General Public License v3.0.