ngrok free is great for smaller scale, as you describe. openziti simplifies scale: + mTLS + zero trust w/ inbound firewall rule of deny-all (rather than ACLs

ngrok free is great for smaller scale, as you describe. openziti simplifies scale: + mTLS + zero trust w/ inbound firewall rule of deny-all (rather than ACLs) + private DNS w/ wildcard domains note: mTLS, wildcard domains etc are in ngrok $900/user annual plan but these are free for foss like the OpenZiti solution used by OP (and maybe free for other solutions too?)