# Questions from a newbie about my planned setup

**URL:** <https://openziti.discourse.group/t/questions-from-a-newbie-about-my-planned-setup/3226>\
**Category:** Uncategorized\
**Created:** [October 10, 2024, 12:26pm UTC](https://openziti.discourse.group/t/questions-from-a-newbie-about-my-planned-setup/3226 "2024-10-10T12:26:12Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\
**Post date:** [October 10, 2024, 3:59pm UTC](https://openziti.discourse.group/t/questions-from-a-newbie-about-my-planned-setup/3226/7 "2024-10-10T15:59:20Z")

</div>

> [@ZzenlD](#):
>
> Isn't this potentially a security risk if the management API is publicly accessible?

It's a risk, yes. For starters, I would urge you to start out in this deployment model (as I also did just the other day on a different forum post here [All-in-one docker compose - #11 by TheLumberjack](https://openziti.discourse.group/t/all-in-one-docker-compose/3206/11))

Once you are comfortable with OpenZiti and understand things and have it working, you could/should "split" the management API away from the internet entirely. There are several posts on the forum about this, doc, and videos to reference. 🙂

> [@ZzenlD](#):
>
> it uses the active connection to the publicly accessible router and the controller can still be reached via this router,

up to three by default - yes. when you leave one network or a router becomes unresponsive/unreachable, the client will failover to the next router with the lowest response time.

---

_[View the full topic](https://openziti.discourse.group/t/questions-from-a-newbie-about-my-planned-setup/3226)._