Link to home
Start Free TrialLog in
Avatar of Hankwembo Christopher,FCCA,FZICA,CIA,MAAT,B.A.Sc
Hankwembo Christopher,FCCA,FZICA,CIA,MAAT,B.A.ScFlag for Zambia

asked on

How to connect the Back end to 4 front ends using the internet.

We have a small client whose network is purely internet NOT VPN , my question is if we put the database (BE)on the server how can we use the his internet connectivity to connect the four  FEs on different locations?


Regards

Chris
Avatar of Gustav Brock
Gustav Brock
Flag of Denmark image

You will have to use an SQL Server (or similar) database server as backend.

Or, set up a Terminal Server and install the application on this, then let the users use Remote Desktop to reach the application.
Avatar of Hankwembo Christopher,FCCA,FZICA,CIA,MAAT,B.A.Sc

ASKER

Actual we have the table on MS SQL Server Express , how can this work?

Regards

Chris
Almost any internet provider allows to create a database (MS SQL or MySQL) which has public IP and which is accessible from the internet. This is rather dangerous but it works. Just be ready for many attack attempts so the VPN is highly recommended.

Once the database is accessible then you need to setup the connection strings for your FEs and everything should work as if the database were on the local machine (with some speed penalty, of course).

The database can even reside on your server in your network. You just have to open necessary ports on your firewall and define appropriate routing. This is slower than the database sitting on the Internet provider premise.
Then it is non-issue. Of course, for security, VPN would be best, but if that is not an option:

  • open access not using the default port of 1433, say 14113 (five digits)
  • apply a long password to the non-admin account the application will use
  • if users have fixed IP adresses, limit the access to the server to these
It's a very dangerous idea to have a database directly exposed to the internet, which is precisely what would be required in this instance. Even with firewall rules that are well designed, I would not be a fan of this.

And why 4 different front ends? One per site of the client? If that is the case, then I would argue for building site to site VPN tunnels.
How about team viewer can this be an option.

Regards

Chris
No. That would not work for what you're trying to do. It would have to be a direct or tunneled connect of some sort, and tools like TeamViewer or VNC could not accomplish that.
TeamViewer is quite expensive and, here, wouldn't add to what you can do with native Remote Desktop.
So in this case even VPN cannot be used on the Ms Sql Server express , then what is the way forward can somebody come up with a concrete answer .



Regards

Chris
You asked about TeamViewer, not VPN.

Let's sort a few things out first...
1) where is the back end located?
2) where are the front ends located?
3) can VPN tunnels be established between the sites?
SOLUTION
Avatar of Gustav Brock
Gustav Brock
Flag of Denmark image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I would have more questions:
Why VPN is not an option?
Are these FE applications developed and in use already?
Did you think about Web application?
Did you think about Amazon or other cloud provider?
Yes the fe are all done will sit about 1200 km Away
you can change the connection port from 1433 to something else in sql configuration manager.  Or you can do it at the router using NAT
port 1899 inbound tcp from any ip address ->  port 1433 tcp <sql server ip address> All of the front ends will have to change their connection properties to the WAN address of the BE and your custom port address
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Please let us know how did you implement our answers in your environment.