You should checkout the opensource project OpenZiti (https://openziti.github.io/ https://openziti.github.io/). It has its own internal PKI system so you dont ne

You should checkout the opensource project OpenZiti (https://openziti.github.io/ https://openziti.github.io/). It has its own internal PKI system so you dont need to (but can) like to an external 3rd party. It also allows you to close all inbound ports and link listeners (as every endpoint has embedded identity so makes outbound only connections) and can be embedded directly into apps with SDKs as well as deploy on any popular OS or as a virtual appliance. Our opinion of zero trust is that you should not have to trust us. Thats why we made is open source and with its own internal identity system. The only things you need to trust are the controller (which uses your CA/PKI) and the code (which you can audit).