Layer7 API Management

Dear APIM Experts,

I'm having Customer who's network security policies enforce 'inside-out' traffic. That means that the TCP session for traffic can be only established from LAN to DMZ, not opposite (Of course requests are coming from outside world to the DMZ and these need to be processed somehow).

I could have one API GW deployed in LAN and one in DMZ.

Is there a way to achieve the goal using this architecture with CA API GW?

Are there any other options (except setting some kind of MQ on DMZ side for storing the requests)?

Thank you in advance for help.

Best regards,

Mariusz

Mariusz,

We have seen implementations that deploy a multi trust zone configuration where a gateway resides in the DMZ and another one in the internal network. They normally communicate with each other deploying communication from the DMZ into the internal network and vice versa. The scenario you outlined could use MQ, JMS, Database, Memory Cache servers, Cassandra, etc to have the payload pushed to by a DMZ gateway then the internal Gateway pull the data in.

Sincerely,

Stephen Hughes

Broadcom Support