View Attach (4) Info

Add new attachment

Only authorized users are allowed to upload new attachments.

List of attachments

Kind Attachment Name Size Version Date Modified Author Change note
png
 dmz_port.png 54.9 kB 2 05-Dec-2023 05:32 Ben Spink
png
 dmz_publickey.png 13.9 kB 1 05-Dec-2023 05:32 Ben Spink
png
 dmz_selector.png 30.3 kB 1 05-Dec-2023 05:32 Ben Spink
png
 dmz_user.png 57.6 kB 3 05-Dec-2023 05:32 Ben Spink

This page (revision-38) was last changed on 25-Mar-2024 17:42 by Halmagyi Arpad

This page was created on 05-Dec-2023 05:32 by Ben Spink

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Difference between version and

At line 38 changed one line
When a connection comes into the DMZ server over SFTP/FTP(es)/HTTP(s)/WebDAV(s), the DMZ server talks to the internal server on an existing connection it already has from the internal server. This communication is over a SSL socket always initiated from the internal to the DMZ. The protocol the DMZ then uses inside this secure connection is HTTP. The internal server then attaches the connection to the first HTTP (not HTTPS) port internally that it finds in its list of ports. So all interaction between DMZ and Internal is the HTTP protocol (inside a SSL connection). The user may be using SFTP to connect to the DMZ, and ask for a directory listing. This then results in the DMZ asking the internal for a dir listing using HTTP, and then its translated and delivered to the SFTP client as a SFTP dir listing. This way all protocols are handled byt the DMZ, and the internal server does everything using one protocol that can handle anything the DMZ needs.
When a connection comes into the DMZ server over SFTP/FTP(es)/HTTP(s)/WebDAV(s), the DMZ server talks to the internal server on an existing connection it already has from the internal server. This communication is over a SSL socket always initiated from the internal to the DMZ. The protocol the DMZ then uses inside this secure connection is HTTP. The internal server then attaches the connection to the first HTTP (not HTTPS) port internally that it finds in its list of ports.
So all interaction between DMZ and Internal is the HTTP protocol (inside a SSL connection). The user may be using SFTP to connect to the DMZ, and ask for a directory listing. This then results in the DMZ asking the internal server for a dir listing using HTTP, and then its translated and delivered to the SFTP client as a SFTP dir listing. This way all protocols are handled by the DMZ, and the internal server does everything using one protocol that can handle everything.
----
!No prefs are stored on the DMZ server.
!No users are stored on the DMZ server.
!No user data files are stored on the DMZ server.
!File transfers are streamed through to the Internal server.
Version Date Modified Size Author Changes ... Change note
38 25-Mar-2024 17:42 9.355 kB Halmagyi Arpad to previous
37 25-Mar-2024 17:40 9.27 kB Halmagyi Arpad to previous | to last
36 25-Mar-2024 17:26 9.11 kB Halmagyi Arpad to previous | to last
35 05-Dec-2023 05:32 8.975 kB Ben Spink to previous | to last
34 05-Dec-2023 05:32 8.881 kB Ben Spink to previous | to last
33 05-Dec-2023 05:32 8.89 kB Ben Spink to previous | to last
32 05-Dec-2023 05:32 8.969 kB Ben Spink to previous | to last
31 05-Dec-2023 05:32 7.887 kB Ben Spink to previous | to last
30 05-Dec-2023 05:32 5.528 kB Halmágyi Árpád to previous | to last
29 05-Dec-2023 05:32 5.527 kB Halmágyi Árpád to previous | to last
28 05-Dec-2023 05:32 5.416 kB Ada Csaba to previous | to last
27 05-Dec-2023 05:32 5.414 kB Ada Csaba to previous | to last
26 05-Dec-2023 05:32 4.72 kB Ben Spink to previous | to last
25 05-Dec-2023 05:32 4.639 kB Ben Spink to previous | to last
24 05-Dec-2023 05:32 4.654 kB Ben Spink to previous | to last
23 05-Dec-2023 05:32 4.644 kB Ben Spink to previous | to last
22 05-Dec-2023 05:32 4.648 kB Halmágyi Árpád to previous | to last
21 05-Dec-2023 05:32 4.64 kB Ben Spink to previous | to last
« This page (revision-38) was last changed on 25-Mar-2024 17:42 by Halmagyi Arpad
G’day (anonymous guest)
CrushFTP11 | What's New

Referenced by
Authenticator
CrushOAuth
Enterprise License Enhancements
High Availability
LeftMenu
Update

JSPWiki