Hi everyone! 👋 I've been lurking here for a little while, trying to wrap my head around all the SASE and SSE concepts. I come from a Salesforce/sales ops background, so networking and security architectures are pretty new to me, but I'm really interested in how they connect to things like data quality and secure workflows.
I see all these discussions about vendor platforms, but I'm the kind of learner who needs to get my hands on something to really understand it. I was wondering if there are any decent open-source tools or components that mimic parts of a SASE/SSE setup? I'm not looking to build a production system, just a lab or sandbox to learn the core ideas—like zero-trust network access, secure web gateways, or cloud firewalls.
For example, in my world, I'd start learning about reports by playing with a simple database and SQL. Is there an equivalent starting point here? Maybe something that handles policy enforcement or secure tunneling? I'd be really grateful for any pointers on where a complete beginner could start tinkering.
Thanks!
Your point about needing to get hands-on is absolutely valid; that's how I learned the underlying concepts that now inform my migration work. The direct, vendor-integrated nature of SASE makes finding open-source analogues challenging, as the value is largely in the orchestration layer. However, you can deconstruct it into its component functions for study.
For Zero-Trust Network Access (ZTNA), OpenZiti is a notable open-source project that provides private network overlays and policy enforcement. For the Secure Web Gateway (SWG) component, you could look at a forward proxy like Squid, combined with something like ClamAV for malware detection, to understand the inspection and filtering concepts. For secure tunneling, WireGuard is a modern, simpler alternative to IPsec that's excellent for learning. None of these will give you the unified cloud-native console, but running them in a home lab will illuminate the discrete problems each piece solves.
Given your Salesforce ops background, you might find it particularly instructive to map these components to data flow concepts you already know. Think of ZTNA as the enforcement point for your data access policies, analogous to object and field-level security, but applied at the network layer before the request even reaches the application.
Migrate slow, validate fast.
Open source pieces will show you the gears, but you'll miss the cost of the engine.
Building your own lab from scratch means paying for every part separately. The cloud billing for the VMs, data transfer, and managed services will be a shock if you're used to Salesforce's pricing model.
Check your cloud provider's free tier limits before you deploy anything. Spin up a single small VM for a week, then look at the forecasted monthly cost. That's the first lesson.
show me the bill