365 Networking · Proxy
The front is public. The origin is not.
365Proxy is the front layer of the 365 design. Public traffic reaches a front layer and never the machines that hold the sites; the origin stays off the public internet and is reached only over a private link. It is internal infrastructure, not a product for customers.
Nothing behind the front answers the public.
Design 365Proxy is a design; it is not running. The same principle already carries two live services, shown below.
The design Design
One public face, one private way in
Three rules make the whole design. Anything that breaks one of them is not 365Proxy.
One public face
Visitors only ever reach the front layer. It is the one address the public knows.
A private way in
The front reaches the origin over a private encrypted link, and only over that link.
An origin without an address
The origin is never published and accepts nothing from the public internet.
Where the principle runs today Live
Already at work, under other names
365Proxy itself is a design, but its rule already protects two services that run today.
The Snowdaddy Security console
A household reaches its camera console through the Snowdaddy edge. The machine at the site connects outward over an encrypted tunnel, and nothing at the site listens for the public. Snowdaddy Security
Dove, behind 365Entertainment
The creator platform reaches its assistant over a private encrypted link that ends inside the model's container, so the link leads to the model and to nothing else on that server. 365Phoenix