Remote Data Gateway for Secure On-Premise Analytics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data analytics customers operating their own data centers with on-premise databases face challenges in securely accessing cloud-based data analytics environments without migrating their data, as they are hesitant to open firewall network ports for public network communication.
Innovation Solution
A remote data gateway system that enables secure access from a cloud environment to on-premise data without migration, using a data analytics remote data gateway server that connects to an on-premise data client, authenticates, and periodically checks for requests to provide data or run analytics, with features like inverse proxy peer-to-peer routing for handling unreachable clients.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If cloud-based data analytics environment is used to access on-premise data, then data analytics capability is improved, but network security is worsened due to firewall restrictions
Solution Approach 1:
A remote data gateway is introduced as an intermediary component deployed on-premises to bridge the cloud analytics environment and on-premise data sources. The gateway establishes secure outbound connections to data clients, authenticates itself, and retrieves data without requiring inbound firewall ports, thus enabling cloud analytics while maintaining network security posture.
2Reliability
If on-premise data is kept local without migration, then data security is improved, but data accessibility is worsened
Solution Approach 1:
The remote data gateway operates autonomously by periodically initiating self-service connections to data clients, authenticating itself using stored credentials, and automatically retrieving requested data. This eliminates the need for manual data extraction or migration while maintaining data security through programmatic, controlled access.
Solution Approach 2:
Instead of the cloud environment initiating inbound connections to on-premise data (which would require firewall openings), the system inverts the connection direction by having the remote data gateway initiate outbound connections from the on-premises network to data clients, thereby maintaining firewall security while achieving data accessibility.
3Reliability
If remote data gateway connects to on-premise data client, then secure data access is improved, but system complexity is worsened
Solution Approach 1:
The remote data gateway serves multiple functions within a single component: it acts as an authentication client, a data retrieval agent, a connection manager, and a security boundary enforcer. By consolidating these functions, the system achieves secure data access without proportionally increasing overall system complexity.
Data Source
AI summary
In accordance with an embodiment, described herein are systems and methods for providing a remote data gateway for use with an analytics environment, such as, for example, an Oracle Analytics Cloud environment, or a data warehouse or other type of analytics or computing environment. In accordance with an embodiment, the remote data gateway enables secure access by a data analytics warehouse operating in a cloud environment, to a customer's on-premise data, without migrating their on-premise data to the cloud. An on-premise data client exposes a port, which a data analytics remote data gateway server connects to, authenticates itself, and thereafter calls into the client periodically, via a remote data gateway agent, to check for subsequent requests, for example to provide on-premise data to the cloud environment, or to run data analytics on the on-premise data.