Method for remote access to intranet Web server and Web proxy server

Abstract

The invention discloses a method for remote accessing intranet web server, a web proxy server gateway executes the steps: initially orienting a complete path contained a first message sent to the user terminal by a web server to obtain a link; carrying out a rewrite from domain name virtual URL to a domain name real URL for a second message sent to the user terminal by a web server, or extracting the domain name from a initial orienting complete path to directly perform a reorienting or perform a specified format virtual URL mapping and reorienting for a sub domain name when a preset fuzzy policy match succeeds. The invention also discloses a web proxy server. The invention can avoid a Cookie confusion of a user terminal, increases processing efficiency of the web proxy server, and reduce a processing cost of the system.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to a method for remotely accessing an intranet Web server and a Web proxy server. Background technique [0002] The Web proxy server is used to provide proxy access to Web services between the intranet and the extranet. Under normal circumstances, if the host on the intranet accesses the Web server on the extranet, the Web proxy server does not need to rewrite; and if the host on the extranet accesses the Web server on the intranet, because the host on the extranet cannot directly obtain the Therefore, a Web proxy server, such as an SSL VPN (Virtual Private Network based on Secure Socket Layer Protocol) gateway, needs to perform a bidirectional rewriting operation. The embodiment of the present invention proposes a new improvement scheme aiming at the above situation that the Web proxy server needs to perform the rewriting operation. [0003] Taking SSL VPN as an example, t...

AI Technical Summary

Problems solved by technology

[0013] It requires DanaInfo parameter analysis for each HTTPs message of the user to determine whether it can be forwarded, which reduces the processing efficiency of the SSL VPN gateway;

[0014] In particular, the links after virtual path mapping point to the root directory of the www.gateway.com site. In this case, if the SSL VPN gateway acts as a proxy for multiple Web servers, it cannot be accessed from the rewritten path. differentiated

If the SSL VPN gateway does not take special processing, it will cause the user host to mix the cookies (a kind of HTTP status information stored on the user end) of each web server together, which may cause errors; if the SSL VPN gateway side adds a cache to record user Although cookies can guarantee functional correctness, it will inevitably increase the complexity of implementation

Images