News for hackers. Stuff that matters.

A comment on Using HAProxy as an API Gateway, Part 1. Parent comment

Re:Using HAProxy as an API Gateway, Part 1 by geezerjay on Wednesday October 03, 2018 @01:56PM (#18132818)
> Kong itself has been used in highly regulated industries,

Was it used in any application that actually was covered by any regulation enforcing authentication and authorization to the point that kong could directly determine if an implementation does or does not comply with the regulation?

Or was it simply used in highly regulated industries like car stickers are used in the highly regulated auto industry?

[ Parent | on HN ]
Re:Using HAProxy as an API Gateway, Part 1 by fosk on Wednesday October 03, 2018 @02:33PM (#18133274)
> Was it used in any application that actually was covered by any regulation enforcing authentication and authorization to the point that kong could directly determine if an implementation does or does not comply with the regulation?

Yes. Kong Enterprise running on the execution path of in-flight information across distributed and open systems must be audited in the context of enforced regulations, especially banking and healthcare. We do work regularly with our customers to make sure Kong is compliant within their specific use-case and make those audits successful.

[ Parent | on HN ]