Anapaya GATE is a network gateway built on the SCION architecture to connect traditional BGP networks with the SCION network. It operates at the edge of SCION-enabled networks to connect end-users with protected web services, corporate resources, and IoT environments. The system establishes BGP peering sessions to announce and route prefixes between an organization's internal network and remote SCION Autonomous Systems. This function isolates connected infrastructure from the public internet, reducing the attack surface by restricting access to authorized networks.
The gateway provides control over service visibility by allowing organizations to define which Internet Service Providers and remote systems are authorized to access their service endpoints. It uses IP-in-SCION tunneling to establish connections and routes traffic over specified paths to mitigate threats like DDoS attacks and routing manipulation. When deployed in a sharded cluster, the system synchronizes topology information and provides controls for route filtering and traffic path selection. It maintains service availability for remote sites and mobile access through automated data rerouting.
