BeyondCorp is dead, long live BeyondCorp

Re:BeyondCorp is dead, long live BeyondCorp by xyzzy_plugh on Friday February 11, 2022 @08:15PM (#30309004)

I'm not a Googler, but this massively understates the architecture they've built. The beyondcorp "smart reverse proxy" solves authentication, but the true innovation is entirely about contextual authorization. Beyondcorp just binds that context to a human's actions for systems to consume.

You can also see this publicly in GCP's Workload Identity and ALTS primitives, which enable very sophisticated policies.

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by lokar on Friday February 11, 2022 @09:41PM (#30309424)

I was there when it was built Almost all the smarts are in the proxy. If you have a typical web based app integration is easy, not some impossible mandate.

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by xyzzy_plugh on Friday February 11, 2022 @11:01PM (#30309821)

Sure, I said nothing to the contrary. It's a minor simplification to call it a reverse proxy. The proxy is built upon a very deep investment in infrastructure, take all of the cert signing stuff, for example.

Most BeyondCorp concepts seem simple, and they are, but they depend on a lot of existing machinery, almost all of which is non-existent in pre-existing corp networks. The average tech company is currently struggling to catch up.

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by lokar on Monday February 14, 2022 @12:47AM (#30328775)

My point was that it is simple from the POV of the app developer. See the comment I replied to.

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by 0xbadcafebee on Sunday February 13, 2022 @11:55AM (#30323150)

Do you notice all the different components on this page? https://beyondcorp.com/ There are a lot more components and concepts than just an OAuth proxy. A web developer may think it's all very simple from their perspective, but it goes much deeper.

[ Parent | on HN ]

Re:BeyondCorp is dead, long live BeyondCorp by lokar on Monday February 14, 2022 @12:48AM (#30328782)

I know on great detail the implementation and what went into it.

My point was it is simple for an app developer to integrate with.

[ Parent | on HN ]