Abstract: A computer implemented method includes generating a call to an external endpoint from a resource in a first layer of a multi-layer air-gapped network of resources, obtaining metadata that includes a list of external resource endpoints to be whitelisted, the metadata being obtained by a watcher of an edge proxy in each layer, via a data plane service, and generating, via each edge proxy, a dummy certificate for the external endpoints to create trust between edge proxies at adjacent layers in the air-gapped network.

Abstract: A computer implemented method includes generating a first call to an external resource by a first resource in a low layer of a multi-layer network of resources, forwarding the first call though successive multiple layers via a call a forwarder in each layer to an edge proxy in each adjacent higher layer, and establishing a connection to the external resource via a top layer having direct external network access without using domain name servers in layers lower than the top layer.

Abstract: The present disclosure relates to utilizing a hierarchical network communication system to efficiently manage and monitor a controlled hierarchical network. In particular, the hierarchical network communication system utilizes gateway services embedded among various architecture levels of a controlled hierarchical network to facilitate secure communications between levels of the hierarchical network as well as with an authorized external computing device or computing system. In various instances, the gateway service includes various components and elements that facilitate inter-network level communication as well as remote management, including monitoring, configuring, and upgrading components and resources at each level of the controlled hierarchical network.