6.3. Tunnelling - Both Firewalls Closed, with DMZ
Prev Chapter 6. Tunnelling Scenarios Next

6.3. Tunnelling - Both Firewalls Closed, with DMZ

Tunnel Scenario 5 - Data source and user firewall ports closed, using DMZ, read-only

Primary Use  Securely transmit OPC UA, DA, or A&E data between secure networks, without VPNs, privately hosted (monitoring only).

ConfigurationDMZConfiguration
OPC Client: Configure this DataHub instance as an OPC client to the OPC server.  OPC Server: Configure this DataHub instance as an OPC server for the OPC client.
Tunnel Slave: Configure this DataHub instance as a Tunnel slave, so that it initiates connections. Tunnel Master: Configure this DataHub instance as a Tunnel master, to receive connections. Tunnel Slave: Configure this DataHub instance as a Tunnel slave, so that it initiates connections.
Data Flow Direction:
Write-only
When Connection Initiated:
Override Master's values with mine
When Connection Lost:
Mark Master's data “not connected”
 
Data Flow Direction:
Read-only
When Connection Initiated:
Get all values from Master
When Connection Lost:
Mark data here “not connected”

See also Tunnelling Security - Best Practices.

Tunnel Scenario 6 - Data source and user firewall ports closed, using DMZ, read/write

Primary Use  Securely transmit OPC UA, DA, or A&E data between secure networks, without VPNs, privately hosted (monitoring and supervisory control).

ConfigurationDMZConfiguration
OPC Client: Configure this DataHub instance as an OPC client to the OPC server.  OPC Server: Configure this DataHub instance as an OPC server for the OPC client.
Tunnel Slave: Configure this DataHub instance as a Tunnel slave, so that it initiates connections. Tunnel Master: Configure this DataHub instance as a Tunnel master, to receive connections. Tunnel Slave: Configure this DataHub instance as a Tunnel slave, so that it initiates connections.
Data Flow Direction:
Read/Write
When Connection Initiated:
Override Master's values with mine
When Connection Lost:
Mark Master's data “not connected”
 
Data Flow Direction:
Read/Write
When Connection Initiated:
Get all values from Master
When Connection Lost:
Mark data here “not connected”

See also Tunnelling Security - Best Practices.

Prev Up Next
6.2. Tunnelling - One Firewall Closed Home 6.4. TCP Ports and DataHub Tunnelling