# From the Bowtie team Zero Trust networking, SASE, and the architecture behind a security platform with no middleman. **May 21, 2026 · Justin Francesconi** **Bowtie Fabric: Site-to-Site Networking Without the Detour** Bowtie Fabric turns the Controllers already running in your environment into a full-mesh site-to-site network. Traffic between cloud, datacenter, branch, and colo sites is encrypted directly between Controllers and never traverses infrastructure operated by Bowtie. **March 9, 2026 · Justin Francesconi** **The Coffee Shop Network: Zero Trust Overlay Architecture for Enterprise Networks** Coffee shop networking says treat every network as untrusted and move the intelligence to an overlay. The idea is sound, but IP address conflicts, unreliable transport, and M&A make it harder than it sounds. Here's how Bowtie solves the hard parts. **February 12, 2026 · Justin Francesconi** **BGP for the Overlay: How Bowtie Preserves Client Identity Through Failover** Most ZTNA products hide your users behind a shared NAT address, breaking firewall attribution and killing sessions on failover. Bowtie's BGP functionality advertises unique client overlay IPs directly into your routing infrastructure, preserving end-to-end visibility and session continuity without mapping tables or state sync. **September 16, 2025 · Justin Francesconi** **Zero Trust Network Access for Aerospace and Defense** Cloud-proxied ZTNA routes ITAR and CUI data through third-party infrastructure, expanding your compliance boundary. Sovereign ZTNA keeps data on your network. This guide covers ITAR, CMMC 2.0, FedRAMP requirements and how direct-routed ZTNA maps to specific controls. **September 4, 2025 · William Eshagh** **In Vendors We Trust** Trust in vendors to prioritize customer security over their own success is misplaced. Creating expensive, incompatible duplicates of popular products for ‘discerning’ customers discredits the vendor’s security commitment to its broader customer base and balkanizes feature sets. **August 6, 2025 · Issac Kelly** **Introducing HTTPS WebSocket Tunneling: Secure, Private Network Access in Restrictive Environments** Bowtie introduces HTTPS WebSocket tunneling to ensure robust, compliant, and discreet network connectivity – no matter how restrictive your operating environment. **August 4, 2025 · Justin Francesconi** **ZTNA vs VPN: Why VPNs Are a Liability and What Replaces Them** VPNs grant network-level access and create the conditions for lateral movement. ZTNA replaces them with application-level access, continuous verification, and per-session authorization. Here is the architectural difference, the cost comparison, and how to migrate. **June 9, 2025 · Justin Francesconi** **Bowtie vs Zscaler: Sovereign SASE vs Cloud-Delivered SASE** A technical comparison of Bowtie and Zscaler architectures. Bowtie keeps data on your infrastructure. Zscaler routes everything through their cloud. This post covers data flow differences, compliance implications, and pricing. **April 10, 2025 · Bowtie Security Team** **Fast Flux Evasion Explained: How Attackers Outsmart Traditional Filters** Fast Flux is a DNS-based evasion tactic that breaks IP blocklists. We unpack how attackers use it to stay ahead and why conventional SASE tools can’t keep up — then show how Bowtie neutralizes Fast Flux with DNS-layer enforcement and decentralized control. **March 24, 2025 · Tyler Langlois** **Turning Business Logic Errors into Compile-time Errors** Learn how to eliminate business logic bugs by turning them into compile-time errors using Rust’s type system. This post shows how features like Option, pattern matching, and the From trait can catch complex integration issues early. **February 3, 2025 · Justin Francesconi** **Sovereign SASE: Secure Access Service Edge Under Your Control** Sovereign SASE keeps your data off third-party clouds while delivering the same security functions as cloud-delivered SASE. This post explains the architecture, deployment model, and why it matters for regulated industries. **December 21, 2024 · Justin Francesconi** **Preparing for DORA Compliance: Network Security Requirements** The Digital Operational Resilience Act (DORA) requires EU financial institutions to strengthen IT resilience by January 2025. This guide covers what DORA means for network security architecture and how zero trust helps meet requirements. **June 18, 2024 · Taylor Mello** **Building Secure Networks with Bowtie: A Simple Guide to Cloud Deployment** A detailed how-to on building an end-to-end deployment of Bowtie to access cloud networks. In this guide, Taylor Mello provides considerations, step-by-step instructions, and automation tips using Terraform to build secure, zero trust networks with Bowtie. **June 12, 2024 · Justin Francesconi** **What is ZTNA? Zero Trust Network Access Explained** Zero Trust Network Access (ZTNA) replaces VPN-style network access with application-level controls. No implicit trust, continuous verification, and no lateral movement. This guide covers the architecture, components, benefits, and implementation challenges. **April 10, 2024 · Tyler Langlois** **So You Want to Smuggle a Subnet Into an Airport** A look at how Bowtie's unique architecture and design helps make network conflicts, network sprawl, and challenges associated with RFC 1918 a thing of the past. **January 11, 2024 · Issac Kelly** **Our Database Came From the Future** Bowtie's innovative architecture empowers businesses to access private resources without being in the middle of the process. This detailed post is the first in a series on our control plane, first delving into our use of Automerge—a 'Local First' conflict-free data type implementation. Discover how Bowtie achieves resilient, scalable, and partition-tolerant networking, facilitating seamless and efficient integration across multiple sites. **January 4, 2024 · Justin Francesconi** **What is SASE? Secure Access Service Edge Explained** SASE combines network security and wide-area networking into a single cloud-delivered service. This guide covers the architecture, how SASE relates to ZTNA, and why data sovereignty matters when choosing a SASE provider. **August 7, 2023 · William Eshagh** **Trading Security for Convenience: A Closer Look at the Faustian Bargain of SaaS** The industry is hurtling towards the SaaSification of everything, but what does this mean for customers and vendors alike? This in-depth post explores the complex landscape of SaaS, highlighting both its promises and costs, especially in areas like security and autonomy. Through real examples and historical security failures, we suggest a more critical approach to embracing the SaaS model. **February 21, 2023 · William Eshagh** **The Importance of Network Resiliency** There is a better way to build enterprise networks. Bowtie is building for this future. The network is everywhere now. **February 21, 2023 · William Eshagh** **Move the Enterprise Network to the Edge with Secure Access from Bowtie** The who, what, and why of Bowtie. Mostly the why.