Implementing Oracle API Platform Cloud Service

Firewall or no firewall

Arguably as the API gateway is a frontline component with security features, it may not be necessary to deploy a firewall. That said, given the licensing model which includes the API call count including rejected calls, there is sense in exploiting the fact that people will have invested in some way in a dedicated firewall capability as this means that simple probing and attacks can be easily deflected without calls to the gateway and incurring cost. This approach also means that the network contact with the outside world passes through a managed point of contact to the outside world. If a firewall is available (even if it is an open source software only solution), we would recommend using it for these course grain ...