API provider side: the NGINX module opens secure (mTLS, X.509 identity authenticated) connections outbound to a private overlay.
API client side: access the overlay over Internet via using the Ziti SDK (agentless approach), or using an API-specific host agent. Also mTLS, X.509 identity authenticated.
The private overlay bridges. Both sides enabled to close all inbound ports to the Internet.
All built on open source OpenZiti networking platform.
1 comment
[ 5.8 ms ] story [ 34.5 ms ] threadAPI provider side: the NGINX module opens secure (mTLS, X.509 identity authenticated) connections outbound to a private overlay.
API client side: access the overlay over Internet via using the Ziti SDK (agentless approach), or using an API-specific host agent. Also mTLS, X.509 identity authenticated.
The private overlay bridges. Both sides enabled to close all inbound ports to the Internet.
All built on open source OpenZiti networking platform.