System and method of secure network management using a reverse proxy server
A method and system for securely routing traffic in a computing environment via a firewall, the method including configuring a reverse proxy server via a first configuration file and configuring a DNS server via a second configuration file, and routing traffic via the reverse proxy server by looking up addresses in the DNS server. The first configuration file includes a plurality of target IP addresses, each of the plurality of target IP addresses referencing a DNS record in the DNS server and the second configuration file includes a plurality of DNS records, where each of the DNS records is initially set to point to a default IP address. When it is determined that there is a change to an IP address of a resource in the computing environment, the DNS record associated with the resource in the DNS server is automatically updated via an API call to the DNS server by replacing the default IP address with the updated IP address for the resource. The reverse proxy servers refers to the updated DNS record to route traffic to the resource.
1 . A system for securely routing traffic in a computing environment to a resource system, the system comprising:
a reverse proxy server;
a firewall;
Domain Name System (DNS) server;
a processor; and
a memory storing executable instructions that, when executed, cause the processor alone or in combination with other processors to perform operations of:
configuring the reverse proxy server via a first configuration file that includes a plurality of target IP addresses referencing a plurality of DNS records in the DNS server;
configuring the DNS server via a second configuration file that includes the plurality of DNS records previously configured to point to a default IP address;
detecting a change to an IP address of a resource element in the resource system;
upon detecting the change, updating a DNS record associated with the resource element in the DNS server via an Application Programming Interface (API) call to the DNS server, wherein updating the DNS record includes replacing the default IP address in the DNS record with an updated IP address for the resource element;
utilizing, by the reverse proxy server, the DNS record to route the traffic to the firewall; and
routing, by the firewall, the traffic from the reverse proxy server to the resource element, wherein the firewall is statically configured with Network Address Translation (NAT) rules.
2 . The system of claim 1 , wherein the reverse proxy server is a static reverse proxy server.
3 . The system of claim 1 , wherein the DNS server is a private DNS server.
4 . The system of claim 1 , wherein the resource element comprises a virtual machine.
5 . The system of claim 1 , further comprising a network security group (NSG) element coupled to the reverse proxy server that filters the traffic by determining whether a user is allowed access to the resource element.
6 . The system of claim 1 , wherein the plurality of DNS records in the second configuration file are previously configured to point to the default IP address of 0.0.0.0.
7 . The system of claim 1 , wherein when the change to the IP address of the resource element in the computer environment is needed, the DNS record for the resource in the configuration file is updated to point to the updated IP address for the resource element.
8 . The system of claim 1 , wherein the firewall includes a static number of the NAT rules.
9 . The system of claim 8 , wherein when there is the change in the computing environment that requires updating of records, no updates to the NAT rules in the firewall are needed.
10 . The system of claim 1 , wherein when there is the change in the computing environment that requires updating of records, no updates to the reverse proxy server are needed to correctly route the traffic.
11 . A method for securely routing traffic in a computing environment to a resource system, comprising:
configuring a reverse proxy server via a first configuration file that includes a plurality of target IP addresses referencing a plurality of Domain Name System (DNS) records in a DNS server;
configuring the DNS server via a second configuration file that includes the plurality of DNS records previously configured to point to a default IP address;
detecting a change to an IP address of a resource element in the resource system;
upon detecting the change, updating a DNS record associated with the resource element in the DNS server via an Application Programming Interface (API) call to the DNS server, wherein updating the DNS record includes replacing the default IP address in the DNS record with an updated IP address for the resource element;
utilizing, by the reverse proxy server, the DNS record to route the traffic to a firewall; and
routing, by the firewall, the traffic from the reverse proxy server to the resource element, wherein the firewall is statically configured with Network Address Translation (NAT) rules.
12 . The method of claim 11 , wherein the default IP address is 0.0.0.0.
13 . The method of claim 11 , wherein the firewall includes a static number of the NAT rules.
14 . The method of claim 13 , wherein when there is the change in the computing environment that requires updating of records, no updates to the NAT rules in the firewall are needed to correctly route the traffic via the firewall.
15 . The method of claim 11 , wherein when there is the change in the computing environment that requires updating of records, no updates to the reverse proxy server are needed to correctly route the traffic via the firewall.
16 . The method of claim 12 , wherein the resource element is a virtual machine.
17 . A non-transitory computer readable medium on which are stored instructions that when executed cause a programmable device for securely routing traffic in a computing environment to a resource system to perform functions of:
configuring a reverse proxy server via a first configuration file that includes a plurality of target IP addresses referencing a plurality of Domain Name System (DNS) records in a DNS server;
configuring the DNS server via a second configuration file that includes the plurality of DNS records previously configured to point to a default IP address;
detecting a change to an IP address of a resource element in the resource system;
upon detecting the change, updating a DNS record associated with the resource element in the DNS server via an Application Programming Interface (API) call to the DNS server, wherein updating the DNS record includes replacing the default IP address in the DNS record with an updated IP address for the resource element;
utilizing, by the reverse proxy server, the DNS record to route the traffic to a firewall; and
routing, by the firewall, the traffic from the reverse proxy server to the resource element, wherein the firewall is statically configured with Network Address Translation (NAT) rules.
18 . The non-transitory computer readable medium of claim 17 , wherein the firewall includes a static number of Network Address Translation (NAT) rules.
19 . The non-transitory computer readable medium of claim 18 , wherein when there is the change in the computing environment that requires updating of records, no updates to the NAT rules in the firewall are needed to correctly route the traffic via the firewall.
20 . The non-transitory computer readable medium of claim 17 , wherein when there is the change in the computing environment that requires updating of records, no updates to the reverse proxy server are needed to correctly route the traffic via the firewall.