Blog

Or rather a collection of blog posts across different platforms.

SAP BTP: IP-Based Allow-Listing for Applications

To make building custom filters as easy as possible we have introduced a new request header which will be set in every reqeusts sent to applications: x-cf-true-client-ip. This header contains a single IP address (IPv4 or IPv6) that was used to connect to the platform when the request was initiated.

SAP BTP: Support for Customizable Load-Balancing Algorithms

We have added support for configuring the load-balancing algorithm of routes in SAP BTP, Cloud Foundry runtime and environment.

WireGuard Key Rotation

A common requirement in the enterprise world is to only issue short-lived credentials and to rotate them frequently. This is done to prevent compromised keys from giving long-term access to the systems protected by those keys.

This post explores different options to rotate the private keys of WireGuard interfaces without interrupting any ongoing flows.

Changing the SAP BTP Cloud Foundry environment Root Certificate Authority

On May 4th 2023 it was announced that the root certificate authority (CA) used to issue the certificates on SAP domains for the SAP BTP, Cloud Foundry environment needs to be changed. The old CA “DigiCert Global Root CA” (G1) will be replaced by the newer “DigiCert Global Root G2” (G2).

HTTP/2 on SAP BTP, Cloud Foundry runtime

SAP BTP, Cloud Foundry runtime now supports HTTP/2 🎉. This feature is available for everyone who has deployed an app to the platform. In this blog post we will cover what you need to know before using HTTP/2 and how you can enable it for you application.