A method for cross-network configuration channel, related equipment and storage medium

Abstract

The embodiment of the present application relates to the field of cloud services, and provides a method for configuring channels across networks, related equipment, and storage media. Authentication, establishing a first channel between the first server and the relay device, and establishing a second channel between the first server and the communication device. Therefore, when the first server receives a message from the communication device to access the second server, the first server performs the authentication process through various certificates, without the need for the communication device to provide an account password, and passes the second message received from the second channel through the second A channel is sent to the relay device. After the relay device passes the verification of the third authentication information, it sends a second message to the second server, and the second server returns to the communication device according to the original path based on the first response of the second message. This solution can improve the security of the internal network accessing the external network and the efficiency of the client accessing different internal networks at different times.

Description

technical field [0001] The embodiments of the present application relate to the technical field of cloud services, and in particular to a method for configuring channels across networks, related devices, and storage media. Background technique [0002] When the client accesses the service server of the internal network from the external network, it generally adopts method 1 and method 2: in method 1, the proxy channel is used to realize the purpose of the client accessing the internal network from the external network. Generally, a proxy is set up in the intranet, and then the proxy provides proxy services externally. When the client accesses the intranet business for the first time, a proxy channel needs to be created between the client and the proxy, and then based on the proxy channel, Data interaction. In method 2, set up a virtual private network (full English name: Virtual Private Network, English abbreviation: VPN) server in the intranet, and then the VPN server prov...

AI Technical Summary

Problems solved by technology

[0003] In the process of research and practice of the existing technology, the inventor of the embodiment of the present application found that in the first method, the internal network needs to expose its own services to the outside world, which has potential security risks; in the second method, the internal network needs to provide VPN externally Service, which requires an external network IP address and exposes the external IP address of the internal network to the outside world

It can be seen that the current mechanism for accessing the intranet from the external network has security problems

Images