Remote access manager for virtual computing services

摘要

A remote access manager in a virtual computing services environment negotiates a time limited NAT routing rule to establish a connection between a remote device and virtual desktop resource providing user computing services. A series of NAT connection rules are revised in a dynamic manner such that a pool of ports is available to connect a plurality of remote users to local virtual compute resources over one or more public IP addresses. Once a connection is established, an entry is made in a firewall state table such that the firewall state table allows uninterrupted use of the established connection. After an entry has been made in the state table, or the routing rule has timed out, the port associated with the original NAT routing rule is removed and the same port can be re-used to establish another connection without disrupting active connections.

主权项

1. A method of mapping computing services to user devices comprising:
receiving a login request from a user device, the login request for a local connection identifier; invoking, via listening on a predetermined port, an IP address and port number for a temporary duration to establish a mapping from a global identifier to a local connection identifier, the mapping providing a connection, the local connection identifier indicative of the user; inserting a session into a state table identifying the connection provided via the established mapping; mapping successive traffic using the established mapping; and reusing the port invoked for logging on to the session for subsequent logins for other user devices.