PG Orbit · Features
Your database is behind a bastion. Good.
Production Postgres should not be on the public internet — and PG Orbit doesn't need it to be. Point a connection at your SSH bastion and the app tunnels the Postgres wire protocol through it, exactly like ssh -L on your laptop.
Keys, done properly
Import RSA or Ed25519 private keys from a file, protect them with passphrases, or generate an RSA key on the device itself. Keys and passphrases live in your platform's secure keychain and never sync to our servers — with sync on or off.
- Password and key-based SSH authentication
- Import RSA and Ed25519 keys; generate RSA on device
- Passphrase storage in the device keychain
- Connection monitoring keeps tunnels stable on flaky mobile networks
SSL/TLS when you connect directly
For databases that are reachable directly, PG Orbit supports SSL in Require and Verify-Full modes, including client certificates for mutual TLS — the same options you'd pass to psql.