A cybersecurity team is evaluating a third-party API gateway solution for their microservices architecture. The solution needs to provide a centralized point for authentication, authorization, rate limiting, and traffic routing to various backend microservices, while also protecting the internal services from direct exposure. Which security pattern does this API gateway primarily implement?
- ALoad Balancer.
- BReverse Proxy.
- CContent Delivery Network (CDN).
- DService Mesh.
Show answer & explanationAnswer & explanation
Correct answer: B. Reverse Proxy.
A reverse proxy acts as an intermediary for client requests, forwarding them to one or more backend servers while appearing to the client as a single server. It provides a centralized point for security functions like authentication, authorization, rate limiting, and protects internal services from direct exposure, which perfectly aligns with the API gateway's described functions.
Why the other options are wrong
- A. A Load Balancer primarily distributes network traffic across multiple servers to ensure high availability and performance, but doesn't inherently provide the comprehensive security features described for an API gateway.
- C. A CDN caches content closer to users to improve delivery speed and reduce latency, which is unrelated to the described security and routing functions of an API gateway.
- D. A Service Mesh focuses on inter-service communication within a microservices architecture, managing traffic, policies, and observability between services directly, rather than being an external gateway for initial client requests.
Reverse Proxy
A reverse proxy is a server that sits in front of web servers and forwards client requests to those web servers. It acts as an intermediary, providing a single point of contact for external clients while protecting and abstracting the backend services.
- Protects backend servers from direct exposure.
- Can provide load balancing, SSL termination, caching, and security features.
- Acts as a centralized entry point for an application or microservices.
Memory trick: Think of a Reverse Proxy as the 'bouncer' at the club: it checks IDs, manages the queue, and directs you inside, protecting the VIPs.