Enabling an on-premises resource to be exposed to a public cloud application securely and seamlessly

Apparatus, comprising:

• a processor;
• computer memory holding computer program instructions executed by the processor to enable an application deployed in a cloud to access an on-premises resource, wherein the application normally accesses the on-premises resource over a native, non-HTTP-based protocol, the computer program instructions comprising:
• program code to provide a policy data set having at least one condition, and an associated action, wherein the condition identifies a service name, and the action identifies a location of the on-premises resource, together with a security requirement needed to establish a secure connection to the on-premises resource;
• program code responsive to a determination that the application needs to access the on-premises resource, to issue a communication request from a cloud gateway associated with the application to an on-premises gateway, the communication request issued over a socket-based communication channel established between the cloud gateway and the on-premises gateway, the communication request provided over an HTTP-based protocol and including the policy data set to enable the on-premises gateway to locate the on-premises resource and to establish a proxy connection thereto according to the security requirement;
• and
• program code to deliver application data over the native, non-HTTP-based protocol from the application to the on-premises resource.

A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions executed by the data processing system to enable an application deployed in a cloud to access an on-premises resource, wherein the application normally accesses the on-premises resource over a native, non-HTTP-based protocol, the computer program instructions comprising:

• program code to provide a policy data set having at least one condition, and an associated action, wherein the condition identifies a service name, and the action identifies a location of the on-premises resource, together with a security requirement needed to establish a secure connection to the on-premises resource;
• program code responsive to a determination that the application needs to access the on-premises resource, to issue a communication request from a cloud gateway associated with the application to an on-premises gateway, the communication request issued over a socket-based communication channel established between the cloud gateway and the on-premises gateway, the communication request provided over an HTTP-based protocol and including the policy data set to enable the on-premises gateway to locate the on-premises resource and to establish a proxy connection thereto according to the security requirement;
• and
• program code to deliver application data over the native, non-HTTP-based protocol from the application to the on-premises resource.