Call forwarder for air-gapped networks
AssigneeMicrosoft Technology Licensing, LLC
InventorsNarasimha Karumanchi, Manoj Kumar Ampalam, Krupesh Satishkumar Dhruva, Chandra Mouli Addaguduru
Life of this patent
Estimating the term…
Abstract
A computer implemented method includes generating a first call to an external resource by a first resource in a low layer of a multi-layer network of resources, forwarding the first call though successive multiple layers via a call a forwarder in each layer to an edge proxy in each adjacent higher layer, and establishing a connection to the external resource via a top layer having direct external network access without using domain name servers in layers lower than the top layer.
Claims20
A computer implemented method comprising:
- generating a first call to an external resource by a first resource in a low layer of a multi-layer network of resources;
- forwarding the first call though successive multiple layers via a call forwarder in each layer to an edge proxy in each adjacent higher layer forming a transaction control protocol (TCP) tunnel between the first resource and the external resource, wherein each edge proxy has a transport layer security (TLS) connection with each adjacent layer edge proxy using dummy self-signed certificates;
- and
- establishing a connection to the external resource via a top layer having direct external network access without using domain name servers in layers lower than the top layer.
A computer implemented method comprising:
- receiving a first call to an external resource at a first call forwarder in a first layer of a multi-layer network of resources;
- forwarding the first call to an edge proxy via the first call forwarder in a second layer higher than and adjacent to the first layer forming a transaction control protocol (TCP) tunnel between the first layer and the external resource;
- and
- forwarding the first call via a second call forwarder in the second layer to an edge proxy in the next higher adjacent layer,
- wherein each edge proxy has a transport layer security (TLS) connection with each adjacent layer edge proxy using dummy self-signed certificates.
A device comprising:
- a processor;
- and
- a memory device coupled to the processor and having a program stored thereon for execution by the processor to perform operations comprising:
- generating a first call to an external resource by a first resource in a low layer of a multi-layer network of resources;
- forwarding the first call though successive multiple layers via a call forwarder in each layer to an edge proxy in each adjacent higher layer forwarding the first call though successive multiple layers via a call forwarder in each layer to an edge proxy in each adjacent higher layer forming a transaction control protocol (TCP) tunnel between the first resource and the external resource, wherein each edge proxy has a transport layer security (TLS) connection with each adjacent layer edge proxy using dummy self-signed certificates;
- and
- establishing a connection to the external resource via a top layer having direct external network access without using domain name servers in layers lower than the top layer.
Dependencies are inferred from the claim text.