Database Gateway for Firewalled Network Connectivity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database connectivity methods, such as VPNs, lack flexibility and are cumbersome when trying to access multiple private databases behind firewalls, often resulting in issues like packet interception conflicts and IP address overlaps.
Innovation Solution
Implementing an adapted HTTP 'long poll' technique that allows a server system to periodically poll private databases through a firewall, enabling robust and flexible connectivity to multiple private networks without the need for VPNs, by using custom driver software to translate queries and push results back through the firewall.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VPN software is used to connect to private databases behind firewalls, then connectivity to private networks is enabled, but device complexity and operational difficulty increase due to packet interception conflicts and IP address overlaps when accessing multiple databases
Solution Approach 1:
The patent introduces a database gateway as an intermediary component that sits between the external system and the private database behind the firewall. The gateway receives requests from external systems, translates them into appropriate database queries, and returns results. This mediator approach eliminates the need for complex VPN configurations and resolves IP address conflict issues by providing a dedicated communication channel through the firewall.
Solution Approach 2:
The system is segmented into distinct components: the external system, the database gateway, and the private database. This segmentation allows each component to operate independently with its own network identity, avoiding IP address overlaps. The gateway handles all communication with the external system, while the database remains isolated behind the firewall with its own protected identity.
2Adaptability or versatility
If VPN connections are established to access multiple private databases, then database accessibility is improved, but ease of operation deteriorates due to the need to disconnect and reconnect for each database
Solution Approach 1:
The database gateway is designed as a universal access point that can handle connections to multiple different private databases through a single interface. Instead of requiring separate VPN connections for each database, the gateway provides multi-functional access, allowing users to query any connected database through the same connection channel, thereby simplifying operations.
Solution Approach 2:
Multiple database access capabilities are merged into a single gateway interface. The gateway consolidates what would otherwise require multiple separate VPN connections into one unified access point, allowing seamless switching between databases without disconnection or reconnection operations.
3Object-affected harmful factors
If firewalls block network traffic to protect databases, then database security is improved, but accessibility for authorized users deteriorates
Solution Approach 1:
The database gateway serves as a trusted intermediary that the firewall is configured to allow through. The gateway translates external requests into database-specific queries and manages the communication protocol, enabling authorized access while maintaining firewall security rules. The firewall blocks direct connections but permits the gateway's traffic, thus securing the database while enabling controlled accessibility.
Data Source
AI summary
Databases that reside on a private network behind a firewall may be difficult to access from a cloud platform on the Internet. Techniques disclosed herein allow an Internet system to communicate with multiple different databases behind multiple different firewalls, however. A client-side private computer system, from behind a firewall, transmits a series of database request status inquires to a server system (not behind the firewall). These status inquiries may be sent as HTTP long poll messages. When the server wishes to query a database on the private network, it responds to one of the database request status inquiries. Because the client-side computer initiated communication, the server response is allowed to pass through the firewall when it might otherwise be blocked. Employing such techniques in parallel allows a server to interact with multiple firewalled databases without the difficulties and inconvenience of attempting a VPN connection.