Managed control plane
Use the Pomerium-hosted console and management APIs.
Pomerium Zero
Managed control plane. Private data plane.
Pomerium Zero manages routes, policies, certificates, and cluster state while Core replicas proxy application traffic in your environment.
What this pattern controls
Local data plane
Run Core replicas inside the environment that holds your services.
Faster operations
Start with managed domains, certificates, and cluster health.
Separate management from application traffic
Hosted configuration path
Zero manages routes, policies, certificates, and cluster configuration.
Local application path
Core replicas in your environment proxy application traffic.
Managed control plane
Manage configuration without operating the console
Zero hosts the management plane. A connected Core cluster fetches its configuration and applies it to local replicas.
- Manage routes, policies, certificates, API users, service accounts, and organizations in the Zero console.
- Use a starter domain for evaluation, then add a custom domain.
- Use the Zero API for supported configuration workflows.
Private data plane
Run the access path next to your applications
The data plane remains in the environment that you operate. Zero manages configuration and cluster state from the hosted control plane.
- Run one or more Core replicas in your environment.
- Keep application traffic on the path through those local replicas.
- Review cluster health and supported traffic metrics in Zero.
Zero operations
Manage the hosted control plane
Manage routes and policy
Create routes and policies in the Zero console or Zero API. Create API users and service accounts in the console.
Start with managed TLS
Use a starter domain for evaluation, then add a custom domain with automatic TLS certificate provisioning and renewal.
Run Core in your environment
Connect Core replicas, review cluster health, and inspect cluster traffic metrics in Zero.
Technical sources
Pomerium Zero quickstart
Create a Zero account and connect a local Core cluster.
Pomerium Zero clusters
Cluster configuration, replicas, starter domains, and certificates.
Pomerium metrics
Supported cluster and traffic metrics in Zero.
Pomerium Zero API
Create routes and policy through the Zero API.
