Trusted tunnel bridge
Various embodiments of the present application set forth a computer-implemented method that includes receiving, by a trusted tunnel bridge and from a first application executing in a first network, a first encrypted data packet, where the first encrypted data packet includes an encrypted portion of data, and a destination device identifier (DDI). The method further includes determining, by the trusted tunnel bridge, a particular device in a second network and associated with the DDI included in the first encrypted data packet. The method further includes sending, by the trusted tunnel bridge directly to the particular device, the first encrypted data packet.
1. A computer-implemented method, comprising:
establishing, by a trusted tunnel bridge, a first authenticated communication channel with a first application executing in a first network, wherein the trusted tunnel bridge is outside of the first network;
receiving, by the trusted tunnel bridge and from the first application via the first authenticated communication channel, a first data packet;
determining, by the trusted tunnel bridge and based on the first data packet, a first device in a second network to which the first data packet should be routed; and
sending, by the trusted tunnel bridge to the first device, the first data packet.
2. The computer-implemented method of claim 1 , wherein sending the first data packet comprises sending the first data packet directly to the first device.
3. The computer-implemented method of claim 1 , wherein the first network is protected by a firewall.
4. The computer-implemented method of claim 1 , further comprising establishing, by the trusted tunnel bridge, a second authenticated communication channel with the first device.
5. The computer-implemented method of claim 1 , further comprising establishing, by the trusted tunnel bridge, a second authenticated communication channel with the first device, wherein sending the first data packet comprises sending the first data packet directly to the first device via the second authenticated communication channel.
6. The computer-implemented method of claim 1 , wherein the first network and the second network comprise different networks.
7. The computer-implemented method of claim 1 , wherein the first network and the second network comprise different networks, and access to the second network by the first device is limited by a firewall protecting the first network.
8. The computer-implemented method of claim 1 , further comprising receiving, by the trusted tunnel bridge, data from the first application that is generated by executing a query of a field-searchable data store via the first application.
9. The computer-implemented method of claim 1 , wherein the first data packet includes at least a portion of a set of events that is generated based on raw machine data that reflects activity in an information technology environment.
10. The computer-implemented method of claim 1 , further comprising:
receiving, by the trusted tunnel bridge from the first device, a request to establish a direct WebSocket connection between the first device and the trusted tunnel bridge; and
establishing the direct WebSocket connection,
wherein sending the first data packet comprises sending the first data packet via the direct WebSocket connection.
11. The computer-implemented method of claim 1 , wherein the trusted tunnel bridge comprises a first instance included in a plurality of instances of a trusted tunnel bridge platform, wherein each instance of the trusted tunnel bridge platform receives a copy of the first data packet.
12. The computer-implemented method of claim 1 , wherein the first application implements at least a portion of a data intake and query system.
13. A non-transitory computer-readable storage medium including instructions that, when executed by a processor, cause the processor to perform the steps of:
establishing, by a trusted tunnel bridge, a first authenticated communication channel with a first application executing in a first network;
receiving, by the trusted tunnel bridge and from the first application via the first authenticated communication channel, a first data packet;
determining, by the trusted tunnel bridge and based on the first data packet, a first device in a second network to which the first data packet should be routed; and
sending, by the trusted tunnel bridge to the first device, the first data packet.
14. The non-transitory computer-readable storage medium of claim 13 , wherein the first network is protected by a firewall.
15. The non-transitory computer-readable storage medium of claim 13 , wherein the steps further comprise establishing, by the trusted tunnel bridge, a second authenticated communication channel with the first device, wherein sending the first data packet comprises sending the first data packet directly to the first device via the second authenticated communication channel.
16. The non-transitory computer-readable storage medium of claim 13 , wherein the first network and the second network comprise different networks, and access to the second network by the first device is limited by a firewall protecting the first network.
17. A computing device, comprising:
a memory that includes an application; and
a processor that is coupled to the memory, and when executing the application, performs:
establishing a first authenticated communication channel with a first application executing in a first network;
receiving, from the first application, a first data packet;
determining a first device in a second network to which the first data packet should be routed; and
sending, to the first device, the first data packet.
18. The computing device of claim 17 , wherein the first network is protected by a firewall.
19. The computing device of claim 17 , wherein the processor further performs establishing, by a trusted tunnel bridge, a second authenticated communication channel with the first device, wherein sending the first data packet comprises sending the first data packet directly to the first device via the second authenticated communication channel.
20. The computing device of claim 17 , wherein the first network and the second network comprise different networks, and access to the second network by the first device is limited by a firewall protecting the first network.