Skip to content

Zero-Trust Edge Proxy

Security starts at the edge. All inbound traffic is strictly evaluated by a Traefik-based Authproxy acting as our zero-trust entrypoint.
Strict Ingress Validation

Strict Ingress Validation

Requests are immediately validated against Keycloak OIDC tokens and precise Cerbos permission policies.

Internal Isolation

Internal services do not expose public endpoints. They completely rely on the edge proxy for authentication checks.
Internal Isolation

Ready to see how it fits together?

See where the Traefik Authproxy sits in the request path, in front of every module. See how it fits together