ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Stop relying on perimeter firewalls. Learn how Consul Connect uses Envoy sidecars and Intentions to implement mTLS and Zero Trust security across your microservices.
An architecture note on using Cloudflare Tunnel and Access to expose internal HTTP services without opening inbound firewall ports, focusing on trust boundaries and failure modes.
Learn how Consul Connect intentions let you enforce service‑to‑service allow/deny rules with zero‑trust mTLS, illustrated by a concrete deny‑rule example and its verification steps.
Long-lived SSH keys create persistent access risk. This note covers using Teleport to issue short-lived X.509 certificates for Linux fleet access, including the smallest viable topology, trust boundaries, and failure modes.
Teleport's Just-In-Time access requests let teams replace standing admin roles with short-lived, approved certificates. Here is how the workflow fits into your auth service, plus the configuration trade-offs to weigh before rollout.
Cloudflare Tunnel replaces inbound firewall exceptions with an outbound-only daemon. This post examines the architecture, a version-controlled replica setup, and the operational trade-offs before you commit.
Teleport’s agentless SSH tunneling lets you securely access servers and pods without installing clients, using ephemeral keys and out‑of‑band certificates.
Consul Connect intentions replace IP-based firewall rules with identity-based allow/deny policies evaluated after mTLS. This blog walks through creating, testing, and debugging a web→api intention, and highlights the default-deny trade-offs you'll face in production.
Learn how to implement a zero-trust architecture using Consul Connect and Envoy sidecars, focusing on minimal design, trust boundaries, and operational verification.
consul
cloudflare
teleport
ssh