TechPrufer
Get started
Netflix
Netflix logoNetflix · Feature trail

Application Security Gateway

1 post · Sep 2021

What this trail covers

Netflix is evolving its application security by productizing security controls into a gateway, aiming to streamline the process of making applications internet-facing and ensuring strong authentication as an architectural property. This involves integrating features like WAF, DDoS prevention, security header validation, and logging into a centralized system, significantly reducing the security checklist for development teams and automating infrastructure setup.

All Netflix trails
  1. The Show Must Go On: Securing Netflix Studios At ScaleThis post introduces 'Wall-E' (initially 'API Wall'), a custom Zuul build acting as a gateway that integrates Netflix's Single-Sign-On provider and other security filters (WAF, DDoS prevention, security header validation, logging). It details the shift from manual security checklists to a productized approach where using Wall-E becomes the primary security requirement for Studio applications going internet-facing. The post also highlights the automation of developer experience through version-controlled YAML configuration files to streamline onboarding and reduce setup friction.