You should checkout the opensource project OpenZiti (https://openziti.github.io/ https://openziti.github.io/). It has its own internal PKI system so you dont ne

You should checkout the opensource project OpenZiti (https://openziti.github.io/ https://openziti.github.io/). It has its own internal PKI system so you dont need to (but can) like to an external 3rd party. It also allows you to close all inbound ports and link listeners (as every endpoint has embedded identity so makes outbound only connections) and can be embedded directly into apps with SDKs as well as deploy on any popular OS or as a virtual appliance.