Systems and methods for providing communications between on-premises servers and remote devices

A method for communications between publicly accessible and publicly non-accessible servers and a remote device, comprising:

• receiving, at a proxy service for access to backend servers, a request from a remote device to access backend servers, the device physically outside the premises at which the backend servers reside;
• determining, by the proxy service coupled to a management service, the management service to manage client access requests on the device, a customer and a connection associated with the request, the proxy service communicating with the management service to identify, based on the customer and the connection, a publicly accessible backend server to which to send the request or a publicly non-accessible backend server to which to send the request;
• when the backend server is publicly accessible, forwarding the request to the publicly accessible backend server, executing the request and returning results of the request to the remote device;
• when the backend server is publicly non-accessible, executing:
• determining, by the proxy service, an appropriate tunnel server and tunnel agent that implement a tunneling communication channel associated with the backend server;
• forwarding the request to the tunnel service determined by the proxy service, the tunnel service enabling secure access to the publicly non-accessible backend server;
• storing the request;
• retrieving the stored request by a tunnel agent by way of a Hypertext Transfer Protocol (HTTP) request to the tunnel server, the tunnel agent servicing the publicly non-accessible backend server;
• forwarding the request to the publicly non-accessible backend server;
• executing the request and returning results of the request to the tunnel agent, the tunnel agent returning results to the tunnel service, the tunnel service returning results to the proxy service, the proxy service returning the results to the remote device.

A computer product comprising a non-transitory computer-readable medium storing instructions that, when executed, perform communications between publicly accessible and publicly non-accessible servers and a remote device, the instructions comprising:

• receiving, at a proxy service for access to backend servers, a request from a remote device to access backend servers, the device physically outside the premises at which the backend servers reside;
• determining, by the proxy service coupled to a management service, the management service to manage client access requests on the device, a customer and a connection associated with the request, the proxy service communicating with the management service to identify, based on the customer and the connection, a publicly accessible backend server to which to send the request or a publicly non-accessible backend server to which to send the request;
• when the backend server is publicly accessible, forwarding the request to the publicly accessible backend server, executing the request and returning results of the request to the remote device;
• when the backend server is publicly non-accessible, executing:
• determining, by the proxy service, an appropriate tunnel server and tunnel agent that implement a tunneling communication channel associated with the backend server;
• forwarding the request to the tunnel service determined by the proxy service, the tunnel service enabling secure access to the publicly non-accessible backend server;
• storing the request;
• retrieving the stored request by a tunnel agent byway of a Hypertext Transfer Protocol (HTTP) request to the tunnel server, the tunnel agent servicing the publicly non-accessible backend server;
• forwarding the request to the publicly non-accessible backend server;
• executing the request and returning results of the request to the tunnel agent, the tunnel agent returning results to the tunnel service, the tunnel service returning results to the proxy service, the proxy service returning the results to the remote device.