Zoraxy Auth for protection of "intern" Webserver in combination with Keycloak

[techsupportkoeln]

Hello,

i use some "intern" Webserver Applications for my team and some customer. I like the option of using Zoraxy Auth to make the underlying web servers accessible only to authorized users.

As I understand it, this minimizes the attack vectors, for example, if one of the web applications has a zero-day vulnerability. Because unauthorized individuals can't even access the web server in the first place.

However, some of my web applications required Keycloak. As far as I can tell from my current tests, login doesn't work if the web application and Keycloak are behind Zoraxy Auth.

Is there a way to create exceptions based on IP address, similar to how it works with Basic Auth?

Or is my approach simply wrong?

[tobychui]

Zoraxy Auth is still a really new and experimental feature we just introduced in v3.3.2, maybe you could create an enhancement request so someone that is interested and need the same feature can join the discussion and implements it.

[oxxo49]

It could be great to have a 2FA on Zoraxy Auth ? Are this options planned ?

[madcoda9000]

That, would be awesome!

[grobie671]

That, would be great!!!