March 2025 Summaries

Remote access to servers and applications across multiple sites traditionally involves complex, multi-hop methods such as using VPNs and multiple SSH or RDP sessions, leading to latency, operational complexity, scalability issues, and security vulnerabilities. ngrok offers a streamlined solution by providing secure remote access without the need for a VPN through Cloud Endpoints and Internal Endpoints, allowing organizations to centralize and simplify their access management. By deploying a single ngrok agent on the network, traffic can be dynamically routed to various services, reducing the need for individual device agents and minimizing exposed access points. Cloud endpoints offer externally accessible entry points that are managed centrally, while internal endpoints keep services private within ngrok's network. This approach enhances security, reduces latency by eliminating nested sessions, and offers scalability through centralized management and IP-based access controls. ngrok's configuration tools and agent API enable automated management of tunnels and consistent endpoint configurations, supporting seamless integration with OS service tooling.

As KubeCon + CloudNativeCon Europe 2025 approaches, excitement builds for a week in London filled with Kubernetes activities and networking opportunities. ngrok will be prominently featured at the event, showcasing their solutions at various locations, including Platform Engineering Day and the Solutions Showcase. Attendees can engage with the team, explore demos, and enjoy discussions on topics such as the Gateway API and API gateway selection considerations, as well as a new maturity model for API gateways. A pub night is planned for informal networking, and the release of ngrok's Kubernetes Operator v0.18.0 is highlighted, promising new features like expanded Gateway API support and optimized resource creation strategies. Documentation updates aimed at enhancing user experience with the Operator are also anticipated.

The text details the implementation of ngrok to secure and simplify remote access to smart factory networks, which are often plagued by complex firewall configurations and outdated VPN setups. By deploying a single ngrok agent per factory, the solution provides a universal gateway for secure ingress to essential services, such as telemetry APIs, sensor databases, and web dashboards, without exposing them to the public internet. Internal endpoints allow factory services to be accessible within ngrok’s private network, while cloud endpoints manage external access for cloud apps, enhancing security and reliability. The setup dynamically controls access, with the ngrok agent managing tunnels and running as a persistent background service, ensuring security and continuous uptime. The architecture supports scaling across multiple factories while requiring minimal installation efforts and integrates with Azure AD and mTLS for additional security.

Ngrok advocates for a simplified multicloud networking model, addressing the complexity and challenges associated with using multiple cloud providers. The text highlights the significant barriers and complexities of multicloud setups, including networking, security, configuration management, and observability, while acknowledging the potential benefits such as improved availability, redundancy, and cost arbitrage. It discusses the challenges of cross-cloud networking, identity and access management, configuration drift, and lack of intuitive observability, while suggesting that API gateways can partially mitigate these issues by unifying routing, centralizing security policies, and standardizing API configurations. Ngrok suggests using an API gateway that comes bundled with essential cross-cloud networking needs, aiming to reduce complexity and enhance scalability. The company promotes its multicloud API gateway as a solution that integrates seamlessly across different environments and offers a streamlined setup process.

Ngrok has developed a highly composable API gateway that is designed to be approachable, reusable, and scalable, allowing users to mix and match components with ease. The gateway utilizes Cloud Endpoints, which are globally accessible via the ngrok network, and internal Agent Endpoints that secure traffic through tunnels. Central to its functionality is Traffic Policy, a configuration language that manages request orchestration, allowing users to set comprehensive API service controls. By leveraging the forward-internal action, users can seamlessly route traffic between cloud and internal endpoints, simplifying API management. The gateway architecture supports the integration of multiple upstream services, enabling path-based traffic routing and the use of CEL interpolation for efficient request management. Moreover, ngrok emphasizes centralized policy management on cloud endpoints, offering features like JWT validation, geoblocking, and rate limiting, while also allowing individual service policies for customized control. This architecture not only simplifies DevOps burdens but also provides a flexible and expandable foundation for building API gateways, with extensive support and resources available for users to optimize their setups.