File sharing over secure connections
Systems and methods for file sharing over secure connections. An example method comprises: receiving a client request identifying a file sharing host and a file residing on the file sharing host; establishing a secure client connection; responsive to identifying a management connection with the file sharing host, transmitting an identifier and a parameter of the secure client connection via the management connection; receiving a host request to establish a secure host connection, the host request comprising the identifier of the secure client connection; establishing the secure host connection using the parameter of the secure client connection identified by the received identifier; forwarding, over the secure host connection, a first data packet received over the secure client connection, the first data packet comprising at least part of the client request; and forwarding, over the secure client connection, a second data packet received over the secure host connection, the second data packet comprising at least part of the file identified by the client request.
1. A method, comprising:
establishing, with a file sharing host, a management connection with a file sharing proxy server;
receiving at the file sharing host, over the management connection from the file sharing proxy server, a secure connection state parameter of a first secure connection established between the file sharing proxy server and a file sharing client;
establishing, using the secure connection state parameter of the first secure connection, a second secure connection between the file sharing host and the file sharing proxy server;
receiving at the file sharing host, from the filing sharing proxy server, a client request comprising an identifier of a file that is stored on a file system associated with the file sharing host; and
transmitting from the file sharing host, over the second secure connection, a response comprising at least part of the file; wherein
establishing the second secure connection comprises transmitting to the file sharing proxy server a connection request comprising an identifier of the first secure connection and the secure connection state parameter; and
the second secure connection is established over an existing unsecured connection between the file sharing host and the file sharing proxy server.
2. The method of claim 1 , wherein
the second secure connection is provided by a Secure Socket Layer (SSL) connection.
3. The method of claim 1 , wherein
the secure connection state parameter comprises a Secure Socket Layer (SSL) connection state element.
4. The method of claim 1 , wherein
the secure connection state parameter comprises a Secure Socket Layer (SSL) session key.
5. The method of claim 1 , wherein
establishing the management connection comprises transmitting an authentication credential to the file sharing proxy server.
6. The method of claim 1 , wherein
establishing the management connection comprises transmitting an application-level protocol identifier to the file sharing proxy server.
7. The method of claim 1 , further comprising:
validating a status of the management connection by exchanging periodic heartbeat messages with the filing sharing proxy server.
8. A system, comprising:
a memory for storing instructions that are executed by the processing device; and
a processing device coupled to the memory, the processing device configured to:
establish a management connection with a file sharing proxy server;
receive, over the management connection from the file sharing proxy server, a secure connection state parameter of a first secure connection established between the file sharing proxy server and a file sharing client;
establish, using the secure connection state parameter of the first secure connection, a second secure connection between the file sharing host and the file sharing proxy server;
receive, from the filing sharing proxy server, a client request comprising an identifier of a file that is stored on a file system associated with the file sharing host; and
transmit, over the second secure connection, a response comprising at least part of the file; wherein
establishing the second secure connection comprises transmitting to the file sharing proxy server a connection request comprising an identifier of the first secure connection and the secure connection state parameter; and
the second secure connection is established over an existing unsecured connection between the file sharing host and the file sharing proxy server.
9. The system of claim 8 , wherein
the second secure connection is provided by a Secure Socket Layer (SSL) connection.
10. The system of claim 8 , wherein
the secure connection state parameter comprises at least one of a Secure Socket Layer (SSL) connection state element and a SSL session key.
11. The system of claim 8 , wherein
establishing the management connection comprises transmitting, to the file sharing proxy server, at least one of an authentication credential and an application-level protocol identifier.
12. The system of claim 8 , wherein the processing device is further configured to:
validate a status of the management connection by exchanging periodic heartbeat messages with the filing sharing proxy server.
13. A non-transitory computer-readable storage medium comprising executable instructions that, when executed by a computer system, cause the computer system to:
establish a management connection with a file sharing proxy server:
receive, over the management connection, a secure connection state parameter of a first secure connection established between the file sharing proxy server and a file sharing client;
establish, using the secure connection state parameter of the first secure connection, a second secure connection with the file sharing proxy server;
receive, from the filing sharing proxy server, a client request comprising an identifier of a file that is stored on a file system associated with the file sharing host; and
transmit, over the second secure connection, a response comprising at least part of the file; wherein
establishing the second secure connection comprises transmitting to the file sharing proxy server a connection request comprising an identifier of the first secure connection and the secure connection state parameter; and
the second secure connection is established over an existing unsecured connection between the file sharing host and the file sharing proxy server.
14. The non-transitory computer-readable storage medium of claim 13 , wherein
the second secure connection is provided by a Secure Socket Layer (SSL) connection.
15. The non-transitory computer-readable storage medium of claim 13 , wherein
the secure connection state parameter comprises at least one of a Secure Socket Layer (SSL) connection state element and a SSL session key.