Networking

Software-Defined Perimeter (SDP) Workflow

Network Design diagram · made in Skemio

Software-Defined Perimeter diagram illustrating client authenticating with an SDP controller, which unlocks an ephemeral tunnel through an SDP gateway to internal servers.
Software-Defined Perimeter diagram illustrating client authenticating with an SDP controller, which unlocks an ephemeral tunnel through an SDP gateway to internal servers.
Open it in SkemioMake your own

What it shows

  • Single Packet Authorization (SPA) keeps gateways silent to port scans.
  • Centralized controller validates identity and device posture before access.
  • Ephemeral, encrypted mTLS tunnels form only to authorized micro-services.

The takeaway

SDP enforces 'verify first, connect second,' eliminating the broad network exposure of legacy VPNs.

More network design diagrams