System and method of secure network management using a reverse proxy server

1 . A system for securely routing traffic in a computing environment to a resource system, the system comprising:

a reverse proxy server;

a firewall;

Domain Name System (DNS) server;

a processor; and

a memory storing executable instructions that, when executed, cause the processor alone or in combination with other processors to perform operations of:

configuring the reverse proxy server via a first configuration file that includes a plurality of target IP addresses referencing a plurality of DNS records in the DNS server;

configuring the DNS server via a second configuration file that includes the plurality of DNS records previously configured to point to a default IP address;

detecting a change to an IP address of a resource element in the resource system;

upon detecting the change, updating a DNS record associated with the resource element in the DNS server via an Application Programming Interface (API) call to the DNS server, wherein updating the DNS record includes replacing the default IP address in the DNS record with an updated IP address for the resource element;

utilizing, by the reverse proxy server, the DNS record to route the traffic to the firewall; and

routing, by the firewall, the traffic from the reverse proxy server to the resource element, wherein the firewall is statically configured with Network Address Translation (NAT) rules.

2 . The system of claim 1 , wherein the reverse proxy server is a static reverse proxy server.

3 . The system of claim 1 , wherein the DNS server is a private DNS server.

4 . The system of claim 1 , wherein the resource element comprises a virtual machine.

5 . The system of claim 1 , further comprising a network security group (NSG) element coupled to the reverse proxy server that filters the traffic by determining whether a user is allowed access to the resource element.

6 . The system of claim 1 , wherein the plurality of DNS records in the second configuration file are previously configured to point to the default IP address of 0.0.0.0.

7 . The system of claim 1 , wherein when the change to the IP address of the resource element in the computer environment is needed, the DNS record for the resource in the configuration file is updated to point to the updated IP address for the resource element.

8 . The system of claim 1 , wherein the firewall includes a static number of the NAT rules.

9 . The system of claim 8 , wherein when there is the change in the computing environment that requires updating of records, no updates to the NAT rules in the firewall are needed.

10 . The system of claim 1 , wherein when there is the change in the computing environment that requires updating of records, no updates to the reverse proxy server are needed to correctly route the traffic.

11 . A method for securely routing traffic in a computing environment to a resource system, comprising:

configuring a reverse proxy server via a first configuration file that includes a plurality of target IP addresses referencing a plurality of Domain Name System (DNS) records in a DNS server;

configuring the DNS server via a second configuration file that includes the plurality of DNS records previously configured to point to a default IP address;

detecting a change to an IP address of a resource element in the resource system;

upon detecting the change, updating a DNS record associated with the resource element in the DNS server via an Application Programming Interface (API) call to the DNS server, wherein updating the DNS record includes replacing the default IP address in the DNS record with an updated IP address for the resource element;

utilizing, by the reverse proxy server, the DNS record to route the traffic to a firewall; and

routing, by the firewall, the traffic from the reverse proxy server to the resource element, wherein the firewall is statically configured with Network Address Translation (NAT) rules.

12 . The method of claim 11 , wherein the default IP address is 0.0.0.0.

13 . The method of claim 11 , wherein the firewall includes a static number of the NAT rules.

14 . The method of claim 13 , wherein when there is the change in the computing environment that requires updating of records, no updates to the NAT rules in the firewall are needed to correctly route the traffic via the firewall.

15 . The method of claim 11 , wherein when there is the change in the computing environment that requires updating of records, no updates to the reverse proxy server are needed to correctly route the traffic via the firewall.

16 . The method of claim 12 , wherein the resource element is a virtual machine.

17 . A non-transitory computer readable medium on which are stored instructions that when executed cause a programmable device for securely routing traffic in a computing environment to a resource system to perform functions of:

configuring a reverse proxy server via a first configuration file that includes a plurality of target IP addresses referencing a plurality of Domain Name System (DNS) records in a DNS server;

configuring the DNS server via a second configuration file that includes the plurality of DNS records previously configured to point to a default IP address;

detecting a change to an IP address of a resource element in the resource system;

upon detecting the change, updating a DNS record associated with the resource element in the DNS server via an Application Programming Interface (API) call to the DNS server, wherein updating the DNS record includes replacing the default IP address in the DNS record with an updated IP address for the resource element;

utilizing, by the reverse proxy server, the DNS record to route the traffic to a firewall; and

routing, by the firewall, the traffic from the reverse proxy server to the resource element, wherein the firewall is statically configured with Network Address Translation (NAT) rules.

18 . The non-transitory computer readable medium of claim 17 , wherein the firewall includes a static number of Network Address Translation (NAT) rules.

19 . The non-transitory computer readable medium of claim 18 , wherein when there is the change in the computing environment that requires updating of records, no updates to the NAT rules in the firewall are needed to correctly route the traffic via the firewall.

20 . The non-transitory computer readable medium of claim 17 , wherein when there is the change in the computing environment that requires updating of records, no updates to the reverse proxy server are needed to correctly route the traffic via the firewall.