Stateless Bastion Access Management for Seamless Node Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing bastion host systems in cloud computing are stateful, requiring reconfiguration and service interruption during node replacement or addition, leading to inefficiencies in scaling, redundancy, and security vulnerabilities due to direct server access.
Innovation Solution
Implement a stateless operation and maintenance channel management cluster with clients on servers to manage access commands, using TCP for communication and session state information recorded on clients, enabling seamless node switching and rapid scaling without service disruption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a stateful bastion host system is used to manage user access, then access security is improved, but node replacement or addition requires service interruption and reconfiguration
Solution Approach 1:
The system separates the bastion host functionality into two independent components: a stateless operation and maintenance channel management cluster that handles command distribution, and a stateful client component that maintains session state information. This segmentation allows the management cluster to be scaled and replaced without affecting ongoing sessions, resolving the contradiction between security management and scaling efficiency.
Solution Approach 2:
The session state information is extracted from the operation and maintenance channel management cluster and stored locally in the client component. This extraction enables the management cluster to operate in a stateless manner, allowing seamless node replacement and addition while maintaining continuous access sessions through the client's local state storage.
2Reliability
If a stateful bastion host system is used, then session control is maintained, but node switching interrupts service
Solution Approach 1:
The system creates a local copy of session state information in the client component, which is maintained independently from the operation and maintenance channel management cluster. This copying mechanism ensures that when nodes in the management cluster are switched, the client retains session state and continues service without interruption, resolving the contradiction between session control and service continuity.
3Ease of operation
If direct server access is implemented, then access simplicity is improved, but security vulnerabilities increase
Solution Approach 1:
The operation and maintenance channel management cluster acts as an intermediary between users and servers, distributing access commands through a stateless architecture. This intermediary approach maintains access simplicity while enhancing security by eliminating the need for direct server access and removing the security risks associated with stateful bastion hosts requiring service interruption during maintenance.
Data Source
AI summary
This disclosure provides an access management method and system. The system includes an operation and maintenance channel management cluster and a client. The client runs on a target server. The method includes: The operation and maintenance channel management cluster obtains an access command of a user for the target server; the operation and maintenance channel management cluster sends the access command to the client; and the client executes the access command based on session state information, where the session state information is information that is about access of the user to the target server and that is recorded by the client.