Link to home
Start Free TrialLog in
Avatar of NytroZ
NytroZFlag for United States of America

asked on

Secure host to host communication

I need to create a secure communication channel between hosts to protect data in transit.  The hosts are Red Hat 6.5 servers and are installed on the web server zone and the application server zone.  Does Red Hat offer a native tool to create a secure connection between hosts?  What methods are used to encrypt data in transit?
Avatar of Dave Baldwin
Dave Baldwin
Flag of United States of America image

SSH is available on every Linux server I know of.  This search https://www.google.com/search?q=SSH+point+to+point+redhat&ie=utf-8&oe=utf-8 lists a lot of info about setting it up.
Avatar of NytroZ

ASKER

I need to clarify my issue.  The web severs send traffic over port 7015 to the application servers using a custom app written by in house developers.     The servers will be used in AWS(Amazon Web Service).  AWS has load balancers that can encrypt the traffic via SSL on the port then send it to the application servers.  What needs to be done at the app level to decrypt that encrypted traffic and read it?  Is there a tool available that would help make this easier?
Using an ssh tunnel, there is nothing that needs to be done, the ssh tunnel encapsulate/encrypts/decrypts the data in an encrypted channel.
Functionality it is similar to a VPN connection for specific traffic, requests destined to port 7015.

You can initiate the connection from your side to the remote aws, using -R to open port 7015 on the aws server destined bak to port 7015 if the application server.

Or as referenced, suggested, aws ssh connection going to your side with-L 7015:localhost:7015.

In both cases, the aws application will reference localhost:7015 to connect to the application server.
ASKER CERTIFIED SOLUTION
Avatar of serialband
serialband
Flag of Ukraine image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of NytroZ

ASKER

AWS document clarified my issue