...
1) How will the exposed interface be secured?
answer: We can use forward proxy from obs.vla.nrao.edu. obs.vla.nrao.edu rewrites all http port 80 requests to https port 443. Apache forward proxy can forward external URL (example: obs.vla.nrao.edu/obsstatussharing) to any internal host and port. We do this on obs.vlba.nrao.edu for the CST running on elbow:8000 and know forward proxy passes muster with InfoSec.
2) Which VLA web server will host the API?
answer: See above. We can host anywhere internally and use forward proxy from obs.vla.nrao.edu to expose the API publicly.
3) Will VLA observational data be fixed 20 minutes in advance?
...