Multiplexing tenant tunnels in software-as-a-service deployments

A system comprising:

• one or more processors coupled to a memory;
• and
• a service provider executable by the one or more processors, wherein the service provider is configured to:
• receive a connection request from an enterprise device via one or more communication networks,
• generate a route to the enterprise device, a logical tunnel with the enterprise device, and a first service port number for use by the enterprise device,
• instantiate a service process executable by the one or more processors and configured to listen for network traffic at a first service port associated with the first service port number,
• store an association of a source Internet protocol (IP) address of the enterprise device obtained from the connection request to the first service port number and to a logical tunnel interface for the logical tunnel, and an association of the logical tunnel interface to a virtual machine (VM) of a plurality of virtual machines (VMs) and to the route, and
• forward, by the service provider, an application request to the first service port for processing by the service process, the application request received from the enterprise device at a second port associated with a well-known port number and via the logical tunnel with the enterprise device.

A computer-readable medium having stored thereon instructions that when executed cause one or more processors of a service provider to:

• receive a connection request from an enterprise device communicatively coupled to the service provider via one or more communication networks;
• generate a route to the enterprise device, a logical tunnel with the enterprise device, and a first service port number for use by the enterprise device;
• instantiate a service process executable by the one or more processors and configured to listen for network traffic at a first service port associated with the first service port number;
• store an association of a source Internet protocol (IP) address of the enterprise device obtained from the connection request to the first service port number and to a logical tunnel interface for the logical tunnel, and an association of the logical tunnel interface to a virtual machine (VM) of a plurality of virtual machines (VMs) and to the route;
• and
• forward an application request to the first service port for processing by the service process, the application request received from the enterprise device at a second port associated with a well-known port number and via the logical tunnel with the enterprise device.