Thinfinity Gateway

Thinfinity Gateways are the core entry points of the platform, responsible for receiving all inbound connections forwarded by the load balancer. They enforce secure HTTPS traffic and route sessions internally to the appropriate services for authentication and orchestration.

Connectivity

Each Gateway instance binds to ports 9443 and 443, facilitating both secure client user traffic and internal communications with Brokers and service agents. All connections are maintained with end-to-end encryption, encompassing WebSocket sessions.

Domain Integration

All Gateway instances must be integrated into the corporate Active Directory domain via domain join procedures. This integration facilitates centralized authentication management, standardized policy enforcement, and uniform security baseline adherence across the deployment environment.

Resilience & Scalability

The architectural design supports multiple Gateway deployments (for example, four instances in this reference implementation). Traffic load is distributed using load balancing mechanisms across all Gateway nodes, ensuring even distribution of user sessions. This approach guarantees high availability and supports horizontal scaling, with system capacity increasing linearly as Gateway instances are added.

Communication

Outbound network traffic originating from Gateway instances is permitted to 0.0.0.0/0, enabling necessary connectivity for integration with AD services, backend databases, monitoring systems, and other internal infrastructure components. This configuration ensures Gateways maintain access to critical internal resources while maintaining isolation from direct external network exposure.