4 ms·
I can't imagine a good reason to expose ANY of my services to the public internet. Aside from a rest-api that drives our application, where that is the feature
by honkycat 8y ago
I can't imagine a good reason to expose ANY of my services to the public internet. Aside from a rest-api that drives our application, where that is the feature of course.
With software like google IAP, and many similar products, it just seems silly.
- TheDong 8y agoMay I recommend reading up on beyondcorp [0]? Google has moved its internal stuff to the beyondcorp model, and it honestly seems like a better approach if you really care about security and have a big enough security team to make it work. [0]: https://www.beyondcorp.com/ https://www.beyondcorp.com/
- raesene9 8y agoBeyondcorp is a great model IF you can afford to manage it correctly. Google have a) huge resources and b) a threat model which means they're subject to a lot of high-end attacks all the time. for many corp's the idea of exposing all their services and endpoints to the general internet without firewalls or VPNs would ... end poorly...
- honkycat 8y agoThank you for the suggestion! :) Google I(dentity)A(ware)P(roxy) is actually a hosted beyondcorp implementation! But I probably should have explained that in my original comment.