On-premises data access and firewall tunneling

摘要

A system and method for tunneling through a network separation device such as a firewall or a Network Address Translator including a first server receiving an access request from a client device to communicate with a host device, where the host device is behind the network separation device. The first server sending a message to a second server in response to receiving the access request, the message including host data for the host device. The second server is configured to send a notification to the host device, and the notification includes instructions for the host device to initialize a pass-through channel with the first server. The first server receiving a pass-through initialization request from the host device and establishing the pass-through channel for communication between the client device and the host device in response to receiving the pass-through initialization request.

主权项

1. A method of tunneling through a network separation device comprising:
receiving, by a first server, an access request from a client device to communicate with a host device, wherein the host device is behind the network separation device; sending, by the first server, in response to receiving the access request, a message to a second server, the message including host data for the host device, wherein the second server is configured to send a notification to the host device, the notification including instructions for the host device to initialize a pass-through channel with the first server; receiving, by the first server, a pass-through initialization request from the host device; and establishing, by the first server, the pass-through channel for communication between the client device and the host device in response to receiving the pass-through initialization request.