Connectivity in SAP BTP provides two services for the Cloud Foundry environment:
- The Connectivity service.
- The Destination service.
The Connectivity service provides a connectivity proxy that can be used to access on-premise resources. Using the Destination service, you can retrieve and store the technical information about the target resource (destination) that you need to connect your application to a remote service or system.
In the following, only the Cloud Foundry runtime is explained. In principle, there are two types of connections to and from the SAP BTP:
- Internet Connectivity uses Destination service.
- Cloud to On-Premise Connectivity uses Destination service and Connectivity service.
The upper part of the image Connectivity depicts the SAP BTP while the lower part depicts the remote systems and services to be connected. The Internet Connectivity can be reached via HTTPS, while the connection to an on-premise system requires the Cloud Connector. The communication is bi-directional.
Connectivity: Cloud Connector
The Cloud Connector:
- Serves as a link between SAP BTP applications and on-premise systems:
- Combines an easy setup with a clear configuration of the systems that are exposed to the SAP BTP.
- Lets you use existing on-premise assets without exposing the entire internal landscape.
- Acts as a reverse invoke proxy between the on-premise network and SAP BTP.
- Provides fine-grained control over:
- On-premise systems and resources that can be accessed by cloud applications.
- Cloud applications using the Cloud Connector.
- Lets you use the features that are required for business-critical enterprise scenarios:
- Recovers broken connections automatically.
- Provides audit logging of inbound traffic and configuration changes.
- Can be run in a high-availability setup.
The Cloud Connector connects SAP backends to SAP BTP subaccounts via an encrypted tunnel. The connection is bidirectional. From an architectural point of view, the Cloud Connector is a possible single point of failure. For this purpose, there is also the possibility of high availability, monitoring, alerting, and more.