TCP proxy method based on remote desktop protocol

Abstract

The invention provides a TCP (Transmission Control Protocol) proxy method based on a remote desktop protocol, which comprises the following steps of: 1, carrying out video stream hijacking on a third-party application program, and hijacking a key process of a video stream; step 2, identifying a session parameter when a client initiates connect, inserting the session parameter at an initial position of initiating a first frame data message, and sending the modified message to a TCP proxy; and step 3, the TCP agent analyzes the first frame of message after receiving the first frame of message, establishes a link with the target asset, and performs unvarnished transmission of the TCP stream. According to the method, upper layer protocols are not distinguished and researched any more, and the method is realized by uniformly forwarding TCP layer video streams. The bastion host coexists in an agent mode and a direct connection mode and can be selectively used in a configuration mode, the bastion host adopts a TCP agent, server assets can be audited, operated and maintained in real time, and the bastion host can well adapt to the special environment of a client site.

Description

technical field [0001] The invention relates to the commonly used remote desktop protocol (RDPVNCREMOTEAPP) and the field of network security. Specifically, it involves the operation and maintenance methods of these three graphics protocols in the bastion host. Background technique [0002] The bastion machine adopts session centralized management for RDP, VNC and REMOTEAPP graphics protocols, and the protocol flow adopts the method of operation and maintenance and asset direct connection. The advantage of this method is to reduce the pressure on the server network and CPU of the bastion machine. The disadvantage is that it cannot be well adapted to the customer site. Special environments, such as: O&M and assets are in different VLANs, firewall policies do not support direct communication, etc. Contents of the invention [0003] The present invention proposes to solve the problems in the prior art, and the technical scheme is as follows, [0004] A kind of TCP agent met...

AI Technical Summary

Problems solved by technology

[0002] The bastion machine adopts session centralized management for RDP, VNC and REMOTEAPP graphics protocols, and the protocol flow adopts the method of operation and maintenance and asset direct connection. The advantage of this method is to reduce the pressure on the server network and CPU of the bastion machine. The disadvantage is that it cannot be well adapted to the customer site. Special environment, such as: operation and maintenance and assets are in different VLANs, firewall policies do not support direct communication, etc.

Images