Cross-network channel configuration method, related equipment and storage medium

Abstract

The embodiment of the invention relates to the field of cloud services. The invention also provides a cross-network channel configuration method, related equipment and a storage medium, and the methodcomprises the steps that a first server carries out the bidirectional authentication with communication equipment and relay equipment in different network environments, and builds a first channel between the first server and the relay equipment and a second channel between the first server and the communication equipment. Therefore, when the first server receives a message of accessing the secondserver from the communication equipment, the first server performs an authentication process through various certificates, the communication equipment does not need to provide an account password, and the second message received from the second channel is sent to the relay equipment through the first channel. The relay equipment sends the second message to the second server after passing the verification of the third authentication information, and the second server returns to the communication equipment according to the original path based on the first response of the second message. According to the scheme, the security of accessing the extranet by the intranet can be improved, and the efficiency of accessing different intranets by the client within different time can be improved.

Description

technical field [0001] The embodiments of the present application relate to the technical field of cloud services, and in particular to a method for configuring channels across networks, related devices, and storage media. Background technique [0002] When the client accesses the service server of the internal network from the external network, it generally adopts method 1 and method 2: in method 1, the proxy channel is used to realize the purpose of the client accessing the internal network from the external network. Generally, a proxy is set up in the intranet, and then the proxy provides proxy services externally. When the client accesses the intranet business for the first time, a proxy channel needs to be created between the client and the proxy, and then based on the proxy channel, Data interaction. In method 2, set up a virtual private network (full English name: Virtual Private Network, English abbreviation: VPN) server in the intranet, and then the VPN server prov...

AI Technical Summary

Problems solved by technology

[0003] In the process of research and practice of the existing technology, the inventor of the embodiment of the present application found that in the first method, the internal network needs to expose its own services to the outside world, which has potential security risks; in the second method, the internal network needs to provide VPN externally Service, which requires an external network IP address and exposes the external IP address of the internal network to the outside world

It can be seen that the current mechanism for accessing the intranet from the external network has security problems

Images