Solved: secure API using apigee - Page 2

Report Inappropriate Content · 07-13-2017 11:55 PM

We are planning to expose a couple simple API to our customers. I am hoping that Apigee can help with the authentication piece with OAuth2.

But I don't know how we can expose our api to Apigee securely without exposing them to the rest of internet?

Can you please help?

anilsr

@Pete He , Welcome to Apigee Community !

Thank you @snehal chakraborty for the great pointers, Just to add on top of what Snehal mentioned above,

Regarding, Exposing your api to Apigee securely without exposing them to the rest of internet,

We call it last mile security. Apigee recommends using 2 way TLS to secure connection between Apigee & Target. Find more about last mile security here. You need to purchase Apigee Edge to do same.

You have mentioned your API as internal, Is it exposed to Internet / Inside DMZ Environment ?

If, It's accessible outside your network, You can Apigee Edge Cloud & Secure connection between your backend servers & Apigee using 2 way TLS as explained here.

If API is inside DMZ environment & not accessible outside your network, You can use Apigee Edge OnPremise & do same 2 way TLS. Apigee offers 3 deployment models. Cloud , OnPremise, Hybrid.

Hope it helps. Keep us posted moving forward if any.

View solution in original post