Security folks, which would you feel more comfortable with?
Hi all, I work at a SaaS company that needs to securely connect our cloud control plane to customer on-premise infrastructure in order to run orchestration and automation tasks. We're trying to avoid requiring customers to open inbound firewall rules or stand up full VPNs. We've narrowed it down to two models: Agent-based HTTPS/mTLS connector Customer deploys a small VM/Pod (our agent) inside their environment. The agent makes an outbound TLS connection (443) to our SaaS, authenticates with...