AMAndrew Martinezinblog.openziti.io·Jan 19, 2023 · 14 min readLessons Learned Writing A Zero Trust NGINX ModuleI authored my first NGINX module to offload OpenZiti connections into a legacy application deployment. That work can be seen in Github in the OpenZiti ngx_ziti_module and an article explaining its operation can be found here: NGINX& ZeroTrust API Sec...01D
AMAndrew Martinezinblog.openziti.io·Dec 1, 2022 · 5 min readNGINX & ZeroTrust API SecurityWith the first version of ngx_ziti_module, it is possible to take an NGINX-exposed Web API and make it completely dark. This means no open ports in NGINX, and it brings the Zero Trust capabilities of OpenZiti to any NGINX deployment. Yes, replace ope...00
AMAndrew Martinezinblog.openziti.io·Oct 20, 2022 · 3 min readOpenZiti Authentication API IntegrationsIn the OpenZiti project, we have created an overlay network that makes network services dark. Part of that system is authenticating devices and users before they connect. The challenge is that most companies already have methods to authenticate human...00
AMAndrew Martinezinblog.openziti.io·Oct 19, 2022 · 3 min readHigh-Level Public/Private CryptographyI find myself writing this high-level overview of public/private key cryptography often. Sometimes I even call it "an overview of asymmetric encryption." It depends on my mood. Rather than hunt for a simple overview and fail to find one I like, I cre...00
AMAndrew Martinezinblog.openziti.io·Aug 16, 2022 · 6 min readSecuring Web APIs With OpenZitiIn the late 2000s, I was a software engineer in the telecom industry, working on large data pipelines that would aggregate billing data from any carrier. The older the carrier, the more likely we would write a web scrapper to automate data retrieval....00
