Can an api proxy access some api hosted locally inside a private network.

[anilsr · Accepted solution]

@Shekhar Garg ,

Apigee Edge supports Private Cloud (OnPrem) deployment too. If you are using Apigee Edge OnPrem version installed on your machines within Private Network, Answer is yes. API proxy can access API hosted on private network.

Apigee Edge Cloud version can't access API hosted on private network until unless you whitelist same.

[#2]

I am not using apigee edge installed on private cloud that's why not able to access apis hosted locally.

Thanks for your answer.

[adas]

@Shekhar Garg If you have a "paid" org in Apigee's public cloud, you should be able to get the Apigee runtime instances whitelisted so that they can connect to your servers hosting the APIs. If you are using a trial account, then IP whitelisting is not an option. Ideally we would like to encourage people NOT to use the IP whitelisting based solution but instead use 2-way SSL to communicate between Apigee Edge and your target backends. This is much more safe and reliable and poses lot less overheads from an operations perspective in the long run.

[anilsr]

@Shekhar Garg , Check out our hybrid solution Apigee microgateway. It helps you talk to api hosted locally and create api proxy in same machine.

[#5]

If your goal is exposure of a private resource (hosted inside your firewall) to an external consumer (on the public network) you will need some means of traversal between the two. As alluded above this can be via installing Edge in your DMZ exposing a secure interface (say https) to the public network and provide routes from the Edge infrastructure to your private resource server, or perhaps using Edge in the cloud with a Mutual SSL secured connection through your firewall to the private resource server. Some customers use an ETL like approach to publish content from private resource servers to an intermediate document store, say API BaaS, and then use this intermediate store to server resources to public consumers.

My point is there are many ways to get there - the method would be based entirely upon your detailed use cases.

If you can provide a more concrete scenario the community can provide their experience and thinking on potential solutions.

[#6]

Hi @Anil Sagar @ Google,

can you please explain in detail what are the option we do have when we want to access the private network api from apigee.

can you please detail down the steps?

Thanks in advance.