How to publish an internal API from a DMZ when LAN connections are prohibited: five approaches

In this article, experts from Neoflex address the challenge of ensuring network security during API integration. The authors share their experience in publishing internal APIs from a demilitarized zone (DMZ) under strict security policies where direct connections to the local area network (LAN) are prohibited. All five architectural schemes presented are implemented using NEOMSA APIM, a Russian API management platform. The material serves as a practical guide for system architects and DevOps engineers facing the need to organize secure communication between network segments. The article explores various approaches to traffic proxying and routing that maintain perimeter integrity while ensuring service availability. This content is valuable for professionals involved in designing corporate API gateways and configuring network policies within secure infrastructures.