Intermediary IHS for Secure BMC Remote Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information handling systems face challenges in establishing network communications between remote administrators and information handling systems without configuring network switches, firewalls, or routers, which can introduce security risks and lead to operational inefficiencies or security breaches.
Innovation Solution
An intermediary information handling system is utilized to establish network communications between the administrator's information handling system and multiple baseboard management controllers, using various messaging protocols and tunneling protocols to facilitate secure and efficient communication without requiring port openings or firewall configurations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If network switches, firewalls, or routers are configured to establish communications between remote administrators and information handling systems, then network connectivity and management capability are improved, but security risks and operational complexity increase
Solution Approach 1:
A cloud-based intermediary platform is introduced between the remote administrator and the information handling system. The administrator's client application connects to the cloud platform, which then establishes separate connections to the target BMC. This intermediary architecture allows remote management without requiring direct network path configuration through firewalls, routers, or switches, thereby maintaining security while enabling operational access.
2Productivity
If firewall or router configurations are modified to enable remote access, then management efficiency is improved, but system security and configuration stability deteriorate
Solution Approach 1:
The cloud-based intermediary platform eliminates the need to modify local network infrastructure configurations. The platform handles all communication routing and protocol translation in the cloud, allowing administrators to manage information handling systems efficiently without touching firewall rules, router configurations, or network switch settings, thus maintaining configuration stability while improving management efficiency.
3Speed
If direct network connections are established between administrators and baseboard management controllers, then communication speed is improved, but security exposure and network complexity increase
Solution Approach 1:
The cloud platform acts as a communication broker that manages multiple connections simultaneously. While an intermediary is introduced, the system maintains efficient communication by establishing dedicated connections between the cloud platform and each BMC, and between the platform and each administrator client. This approach avoids the complexity of peer-to-peer network configuration while maintaining communication speed through optimized cloud-based routing.
Data Source
AI summary
In one or more embodiments, one or more systems, methods, and/or processes may receive, via a network, multiple subscription requests from respective multiple baseboard management controllers (BMCs) of respective multiple information handling systems (IHSs); may receive, via the network, authentication information from a first information handling system (IHS), different from each of the multiple IHSs; may determine that the first IHS is authenticated to access the multiple BMCs; may receive, via the network, multiple publication requests from the first IHS to access, via the network, the multiple BMCs respectively; may receive, via the network, multiple queries from the multiple BMCs respectively associated with the multiple subscription requests; may determine that the multiple publication requests are associated with the multiple subscription requests and are associated with the multiple queries associated with the multiple subscription requests; and may establish network communications with the first IHS and the multiple BMCs.