DevSecOps & Security · Stunnerz Global · 2022 – 2024
Encrypted NGINX ingress on OpenShift
Smaller external attack surface
Production-grade ingress with end-to-end encryption for internal microservices.
Problem
Internal microservices needed encrypted traffic and less exposure to the outside.
Solution
Implemented a secure ingress architecture using NGINX in OpenShift environments with end-to-end encrypted data transmission.
Architecture
- Client
- NGINX ingress (TLS)
- OpenShift routes
- Internal services
Tools
NGINX
OpenShiftTLSOutcome
End-to-end encryption and a minimised external attack surface.
Next projectControlled egress with Squid proxies →