Just deployed Banyan for our team to replace a traditional VPN. Love the zero-trust concept, but the "zero overhead" part? Let's talk.
The policy engine is powerful, but defining all our resources (every internal app, server, DB) as *Services* was manual. Their Terraform provider helped, but we still had to map everything. Example for a simple app:
```hcl
resource "banyan_service" "internal-app" {
name = "app-prod"
description = "Prod App"
access_tiers = [banyan_access_tier.edge.name]
backend {
target {
port = 8443
}
}
policy = banyan_policy.engineers.id
}
```
Each one needed this. Not zero effort.
Also, the connector in our K8s cluster needed tweaks for resource limits. Had to adjust to avoid evictions.
So, real talk: Is the overhead worth it vs. the savings on security incidents? For us, yes, but it's not "set and forget." You're trading VPN management for policy management.
Anyone else run into this? How did you automate service discovery?
#savings