Salesforce ArchitectureArchitect (Hardest)hybridintegrationerp
Architect hybrid cloud integration where Salesforce meets on-premise ERP
Real World Scenario
Manufacturing ERP stays on-premise SAP; Salesforce cloud must integrate through corporate firewall with zero trust.
Expected Answer
• Reverse proxy or iPaaS agent on-premise outbound only connections
• No inbound firewall hole to SAP; middleware polls or event agent
• MuleSoft runtime fabric on-prem or secure tunnel
• Certificate mutual TLS identity both directions
• Message queue buffer SAP downtime Salesforce continues queue
• Network latency budget synchronous vs async interface classification
• DR on-premise agent failover documented
Follow-Up Questions & Answers
Click to expand — each follow-up includes a direct, interview-ready answer
Direct answer: Reverse proxy or iPaaS agent on-premise outbound only connections Also consider: No inbound firewall hole to SAP; middleware polls or event agent In practice: MuleSoft runtime fabric on-prem or secure tunnel Document the decision in an ADR and align with enterprise standards.
Architect Perspective
Hybrid integration is network architecture—outbound agent pattern beats punching SAP firewall holes.