Justified Code/Gatekeeper Pattern

You're signing up to receive emails from Justified Code.

Gateway enables centralized security for your web application.

  • Free email delivery

Gatekeeper Pattern

  • Download
  • 1 File

There are people that want to compromise your system. They can connect to your services if they are exposed to the internet. Adding a gateway into the request flow enables you to centralize security functionality like web application firewalls, DDoS protection, bot detection, request manipulation, authentication initiation, and authorization checks.

You're signing up to receive emails from Justified Code.

A single weak entry can open your whole system.

System Design Diagrams

To give you an idea on what you will learn, i am listing some of the diagrams taken from the guide.

The Problem

Modern systems place a public website in front of APIs, storage, and databases. In many cloud defaults, not only the site but also secondary services are internet-reachable.

The Solution

Place a gateway in front. It is the only internet-facing component. It validates and sanitizes requests, then forwards acceptable traffic to trusted hosts through protected, internal endpoints.

Azure Web App with Application Gateway and WAF

Secondary services (API app, storage, database) live in a virtual network and are reachable only from the web app.

Contents

PDF Files

Gatekeeper Pattern V1.1.pdf
  • 4.61 MB