A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Forwards DNS queries or returns empty (NODATA) by matching domain rules. Supports v2fly domain-list-community (dlc.dat), AdGuard Home filter rules, and inline domain-list-community-style rules.