Trusted tunnel bridge

1. A computer-implemented method comprising:

establishing, by a trusted tunnel bridge, a first authenticated communication channel with a first application executing in a first network;

receiving, by the trusted tunnel bridge and from the first application via the first authenticated communication channel, a first data packet;

determining, by the trusted tunnel bridge and based on the first data packet, a first device in a second network to which the first data packet should be routed;

establishing, by the trusted tunnel bridge, a second authenticated communication channel with the first device in the second network; and

sending, by the trusted tunnel bridge directly to the first device via the second authenticated communication channel, the first data packet.

2. The computer-implemented method of claim 1 , wherein the first network and the second network are different networks.

3. The computer-implemented method of claim 1 , wherein the first network and the second network are different networks, and access to the second network by the first device is limited by a firewall protecting the first network.

4. The computer-implemented method of claim 1 , wherein an encrypted portion of the first data packet is encrypted at least partly using a public key associated with the first device.

5. The computer-implemented method of claim 1 , further comprising receiving, by the trusted tunnel bridge, data from the first application, wherein the data is generated by executing a query of a field-searchable data store via the first application.

6. The computer-implemented method of claim 1 , further comprising receiving, by the trusted tunnel bridge, real-time data from the first application, wherein:

the real-time data is generated by executing a query on a field-searchable data store for accessing a set of events,

each event in the set of events includes a portion of raw machine data that reflects activity in an information technology environment and that is produced by a component of that information technology environment,

each event in the set of events is associated with a timestamp extracted from the portion of the raw machine data included in that event.

7. The computer-implemented method of claim 1 , further comprising:

authenticating, by the trusted tunnel bridge, a first connection between the first application and the trusted tunnel bridge; and

authenticating, by the trusted tunnel bridge, a second connection between the first device and the trusted tunnel bridge.

8. The computer-implemented method of claim 1 , further comprising:

receiving, by the trusted tunnel bridge from the first device, a request to establish a direct WebSocket connection between the first device and the trusted tunnel bridge; and

establishing the direct WebSocket connection,

wherein sending the first data packet comprises sending the first data packet via the direct WebSocket connection.

9. The computer-implemented method of claim 1 , wherein the trusted tunnel bridge is in the second network.

10. The computer-implemented method of claim 1 , wherein determining the first device in the second network comprises:

upon receiving the first data packet, searching, by the trusted tunnel bridge, a routing table using the DDI as a search key; and

identifying, based on the searching, a first entry in the routing table that is associated with the DDI, wherein the first entry specifies the first device as corresponding to the DDI.

11. The computer-implemented method of claim 1 , wherein the DDI is generated from a public key associated with the first device.

12. The computer-implemented method of claim 1 , wherein the trusted tunnel bridge comprises a first instance in a plurality of instances of a trusted tunnel bridge platform, wherein each instance in the plurality of instances:

receives a copy of the first data packet; and

stores the copy of the first data packet.

13. The computer-implemented method of claim 1 , wherein the first device comprises a content streaming device executing a tvOS operating system.

14. The computer-implemented method of claim 1 , wherein the first device comprises a mobile device executing an augmented reality application.

15. The computer-implemented method of claim 1 , wherein the first device comprises a mobile device executing an application configured to deliver alerts based on data from the first application.

16. The computer-implemented method of claim 1 , wherein the first encrypted data packet is received from the first application executing in the first network, wherein the first application is operating on a further device that includes at least a portion of a data intake and query system.

17. A non-transitory computer-readable storage medium including instructions that, when executed by a processor, cause the processor to perform the steps of:

establishing, by a trusted tunnel bridge, a first authenticated communication channel with a first application executing in a first network;

receiving, by the trusted tunnel bridge and from the first application via the first authenticated communication channel, a first data packet;

determining, by the trusted tunnel bridge and based on the first data packet, a first device in a second network to which the first data packet should be routed;

establishing, by the trusted tunnel bridge, a second authenticated communication channel with the first device in the second network; and

sending, by the trusted tunnel bridge directly to the first device via the second authenticated communication channel, the first data packet.

18. The non-transitory computer-readable storage medium of claim 17 , wherein an encrypted portion of the data packet is encrypted at least partly using a public key associated with the first device.

19. A computing device, comprising:

a memory that includes an application; and

a processor that is coupled to the memory, and when executing the application, performs:

establishing, by a trusted tunnel bridge, a first authenticated communication channel with a first application executing in a first network;

receiving, by the trusted tunnel bridge and from the first application via the first authenticated communication channel, a first data packet;

determining, by the trusted tunnel bridge and based on the first data packet, a first device in a second network to which the first data packet should be routed;

establishing, by the trusted tunnel bridge, a second authenticated communication channel with the first device in the second network; and

sending, by the trusted tunnel bridge directly to the first device via the second authenticated communication channel, the first data packet.

20. The computing device of claim 19 , wherein the first device comprises a content streaming device executing an operating system.