DISTRIBUTING OVERLAY NETWORK INGRESS INFORMATION
FIG6 is a further diagram of the system of FIG1
Once the connection has been successfully established, the client may use the connection to access the resource. For example, the client device may use the overlay network interface of the tunnel to establish an application-layer connection 610 to resource R-2 at scheme://resource_R2.internal.corp.example, as shown in FIG6.
diagram
160
network
16
November
190
bastion hosts bastion host
610
application-layer connection
510
connection
110
client device client devices
150
network networks
170
bastion hosts bastion host
120
DNS
['1. A computer-implemented method for providing a resource record for reaching a protected resource of a first network, the method comprising: receiving, over a second network from a client device, a request identifying the protected resource; querying memory to identify a network address of the protected resource; determining, by a processor, whether the protected resource is generally accessible based on the identified network address, wherein a resource is generally accessible if it is not in shared address space; if the protected resource is not generally accessible, identifying reachability information for the protected resource; generating additional information based on the reachability information; and transmitting the additional information and the network address to the client device.', '4. A computer-implemented method for accessing a publically available resource of a first, public network, the method comprising: transmitting, over a second, private network, a request identifying the public resource; receiving, from an authentication server, information identifying a bastion host, a port, and a connection method; generating, by a processor, a request to access the public resource based on the connection method; transmitting the request to the port in order to establish a tunnel connection between the bastion host and the client device; and accessing the public resource via the tunnel connection with the bastion host.', '5. The method of claim 4, wherein the authentication server is a DNS server that provides network addresses in response to queries from client devices associated with network locations within the first, private network.']