Application access method and device in zero trust and computing equipment

Abstract

The embodiment of the invention relates to the technical field of computer networks, and discloses an application access method and gateway in zero trust and a gateway system. The method comprises the steps that when a user initiates access, the application access gateway initiates a proxy-penetrating network to be connected to a security access gateway, and a network channel is established; if the terminal agent and the application access gateway are not in the same network segment, an access request sent by the terminal agent is received through the network channel to access the application, and an application feedback request is transmitted to the terminal agent through the network channel; if in the same network segment, direct connection between the terminal agent and the application access gateway is performed through the security access gateway according to the information of the same network segment, an access request sent by the terminal agent is directly received to access the application, and an application feedback request is directly fed back to the terminal agent. By means of the mode, application deployment can be conducted under the condition that the public cloud and the private cloud are mixed and matched, and the experience consistency of the user accessing the internal and external networks of the application is achieved.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of computer networks, and in particular to an application access method, device and computing equipment in zero trust. Background technique [0002] In the mobile office environment, a virtual private network (Virtual Private Network, VPN) is usually used to access the Internet. The VPN itself is based on network security. Once broken, it will lead to insecure applications on the entire network. Therefore, a zero-trust network based on application security is proposed. , because it runs with least privilege, even if it is compromised, all applications will not be at high risk. However, the zero-trust network architecture of existing manufacturers has certain limitations for complex network environments, such as the hybrid deployment of private clouds and public clouds. [0003] Existing technologies can use multi-factor authentication (Multi-factor authentication, MFA) authentication po...

AI Technical Summary

Problems solved by technology

This method does not have continuous identity and permission verification, nor a reliable access mechanism, which will bring security risks to the application, does not meet the requirements of zero trust security, and requires the cooperation of other components to be used safely

Images