--- title: "Private Networking" description: "5 posts about Private Networking, summarised, each linking to the original." --- # Private Networking > 5 posts about Private Networking, summarised, each linking to the original. ## Articles ### [Architecting Secure Identity: Extending Auth0 PrivateLink with Intelligent Gateways](https://yomu.fyi/post/architecting-secure-identity-extending-auth0-privatelink-with-intellig.md) - Company: [Auth0](https://yomu.fyi/company/auth0.md) - Author: Daryl Martis - Published: Oct 2, 2026 - Type: Problem & solution Enterprises centralize authentication into a single Auth0 environment but must comply with frameworks like PCI-DSS, HIPAA, and SOC 2 that restrict data to private channels. Auth0 Outbound PrivateLink provides a secure unidirectional connection between Auth0 and AWS infrastructure, avoiding the public internet. However, a single PrivateLink connection per environment cannot directly reach multiple isolated VPCs for staging and production. The Intelligent Gateway Pattern solves this by deploying an API gateway or reverse proxy at the PrivateLink termination point to fan out traffic. Auth0 Actions append context such as custom headers like X-Target-Env or specific paths, and the gateway inspects these to route requests to the appropriate isolated VPC, decoupling secure transport from internal routing. This pattern unblocks identity consolidation by allowing a single Auth0 tenant to serve both staging and production workloads while maintaining strict VPC isolation. ### [MongoDB Atlas Joins Google Cloud Foundation Fabric (FAST): Secure Private Data Infrastructure in Minutes](https://yomu.fyi/post/mongodb-atlas-joins-google-cloud-foundation-fabric-fast-secure-private.md) - Company: [MongoDB](https://yomu.fyi/company/mongodb.md) - Published: Aug 26, 2026 - Type: Announcement Many organizations lack cloud fundamentals, making foundational setup complex and time-consuming; Google Cloud Foundation Fabric (FAST) is a GitOps-driven landing zone toolkit that accelerates establishing a production-ready Google Cloud organization. A new MongoDB Atlas module within FAST enables provisioning MongoDB Atlas clusters with Private Service Connect (PSC) for secure, private connectivity. PSC avoids VPC peering issues like CIDR conflicts and transitive routing, using a unidirectional consumer-producer model that respects project boundaries and routes traffic over Google’s private fiber network. The module automates cluster creation, PSC endpoint registration with Service Directory, and internal DNS resolution, integrating with Google Cloud KMS for customer-managed encryption keys. This integration reduces foundational setup from weeks to minutes, providing a secure data foundation that connects to BigQuery for real-time analytics and Vertex AI for GenAI workloads. ### [Fly In 2020 - A year in features (and articles)](https://yomu.fyi/post/fly-in-2020-a-year-in-features-and-articles.md) - Company: [Fly.io](https://yomu.fyi/company/fly-io.md) - Published: Jan 18, 2021 - Type: Announcement Fly’s 2020 retrospective covers the launch and expansion of its Global Application Platform, alongside features and articles released throughout the year. The platform added Turboku for moving Heroku apps to the edge, Cloud Native Buildpack support, Custom Domains with a GraphQL management API, scaling controls, Deno support, pausing and resuming, persistent volumes, and builtin Flyctl builders for Node, Ruby, Deno, Go, and static websites. Later additions included a new logging system, 6PN Private Networking, WireGuard peering, graceful VM shutdown options, and revised VM sizes, while examples demonstrated services such as Redis, MinIO, Gogs, and MQTT using persistent volumes. The article also records supporting work including GoStatic, JSON output in Flyctl, Firecracker-based workload isolation, and Heroku database usage. ### [Incoming! 6PN Private Networks](https://yomu.fyi/post/incoming-6pn-private-networks.md) - Company: [Fly.io](https://yomu.fyi/company/fly-io.md) - Published: Dec 8, 2020 - Type: Announcement Fly.io introduces 6PN, an IPv6 private network intended to let applications in the same organization communicate without public IP addresses, mTLS, or certificates. Each application instance receives an organization-scoped IPv6 address, while per-application internal DNS zones resolve instances, regions, and sibling apps; enabling it requires private\_network = true in fly.toml, though the post says it will soon be on by default. Examples show nginx discovering cache shards, Redis binding to fly-local-6pn, and NATS forming a cross-application cluster through internal names. Behind the feature, addresses encode organization, host, and instance identifiers, while BPF programs enforce network isolation and support WireGuard cryptokey routing; a Rust DNS server serves internal records. The stated goal is simple private connectivity with optional user-managed clustering, service discovery, and certificate infrastructure. ### [Building and Scaling a Global Chatbot using Heroku + Terraform](https://yomu.fyi/post/building-and-scaling-a-global-chatbot-using-heroku-terraform.md) - Company: [Heroku](https://yomu.fyi/company/heroku.md) - Author: Garen Torikian - Published: Apr 22, 2020 - Type: Problem & solution Live Agent, Salesforce’s embeddable chatbot, must handle customer interactions and requests at global scale while remaining highly available across regions. Its eight-person team chose Heroku to avoid managing bare metal, cloud virtual machines, databases, and other third-party services, while relying on managed Java support and regional infrastructure. The platform runs ten apps with Heroku Postgres, Redis, and Apache Kafka dependencies, and deploys them inside Heroku Private Spaces to isolate network boundaries and data. Terraform defines and replicates apps, add-ons, custom domains, logging, and profiling configuration across regions, allowing changes to propagate through a pull request. The result described is a simpler operational model in which Heroku handles maintenance and the team can scale the same architecture into new geographic locations.