Real-time proxies

Abstract

An arrangement for real-time data transmission through data communication networks is disclosed. The arrangement allows for real-time communication between applications located in different internal networks protected by firewalls by means of representing the applications by proxies and establishing TCP channels towards an intermediate proxy server localized outside the firewalls. A set of parameters residing in the server determines i.a. the number of required TCP channels based on the ratio of measured bandwidth between the data flow directions.

Description

FIELD OF THE INVENTION [0001] The present invention is related to real-time data transmission through data communication networks. In particular the present invention discloses an arrangement and a method for high reliability two ways communication in real-time through one or more firewalls advantageously by way of using HTTP / HTTPS protocols and the use of such an arrangement and method. BACKGROUND OF THE INVENTION [0002] To protect a PC or network against unauthorized intrusion (hackers), firewalls are used to control all communication. More and more companies and private users install firewalls in order to protect their network. Firewalls do not know all communication protocols on the Internet, so it is necessary with a proxy to let certain protocols through the firewalls. This is in particular the case when the networks are NATed (Network Address Translation, i.e. private addresses are used on the LAN segment). The firewalls today do not handle real-time data wells. With the incr...

AI Technical Summary

Problems solved by technology

The firewalls today do not handle real-time data wells.

There are many different proposals for solutions within this area, however, currently no good solutions exist and no one seems to be on the way: The big vendors are looking into firewall control protocols that let the applications open and close ports or gates on the firewall.

One is that certificates have to be distributed to all applications that are allowed to perform such operations; another drawback is that the security is strongly degraded according to the number of applications that are allowed to perform such operations.

This will work if NAT isn't enabled though to a high price due to that hackers from the outside can easily attack all computers behind the FW on all ports over 1024.

The drawback is that some operator or corporate personnel etc. has to buy install and configure software for every real-time application somebody behind the FW would like to use.

However, standardizing is extremely slow.

This is a huge problem and the reason why Internet payments solutions aren't widely deployed.

(iii) Many of the big firewall vendors don't want to introduce such solutions, partly because of the two reasons mentioned above.

Another reason is probably that their business case in this case is threatened.

Though, if used in combination with proprietary signaling and only allowing clients on the inside to open up ports, it might get some marked penetration.

Corporations and ISPs will, however, never use it due to reduced security.

The drawback is that it is expensive to set up and maintain two separate networks instead of one.

Hence the problem regarding opening and closing of ports or the use of dedicated hardware.

Images