Page History

Introduction

• A jump  jump host is a server over which traffic to and from a network is channeled, see Jump Host Architecture.
• Jump hosts can be used to provide a secure method of file transfer across network boundaries by not allowing direct transfer over the boundary.
• DMZs  (demilitarized zones) are a common form of jump hosts.
• JADE can be used to carry out file transfer via a jump host, once a JADE client Client has been installed on the jump host.
• A wider range of Different protocols can be used for transfer between the target source host and the jump host than for the transfer to/from between the jump host and the target host. To this end, different parameter sets are defined in the JADE configuration for each part of the transfer.JADE has been written so that from the standpoint of the application originating the file transfer, transfer between the JADE client and the jump host and transfer between the jump host and the remote server are specified as a single operation.

The

...

The following diagram shows schematically how files are sent via the Internet from one network with a DMZ to another network with a DMZ.

...

• Fragments
  • ProtocolFragments
    • *Fragment (any protocol except SMB can be used for transfer from jump host to target)
      • *Connection
      • *Authentication
      • JumpFragmentRef  (References references the JumpFragment)
      • etc.
    • JumpFragment
      • BasicConnection
      • SSHAuthentication
      • JumpDirectory (optional)
      • ProxyForSFTP (optional)
      • StrictHostKeyChecking (optional)
• Profiles
  • Profile
    • Operation
      • Copy
        • CopySource
          • CopySourceFragmentRef
        • CopyTarget
          • CopyTargetFragmentRef
          • Directory
            
            

As already mentioned , the jump host is transparent to the JADE client. A fragment element is specified in the usual manner and is called from a CopySourceFragmentRef or CopyTargetFragmentRef element in the Profiles branch of the configuration.

...

• Only a single JumpFragment can be specified as part of a connection fragment element.

  Jump hosts cannot be specified as part of AlternativeFragment elements.

Parameter Restrictions

• BasicConnection and SSHAuthentication elements must be specified for every JumpFragment. URL- and HTTPConnections and BasicAuthentication are not allowed.
• Password or Publickey authentication can be specified
• Only SFTP proxies can be used with JumpFragment elements, meaning that only proxies that use the SOCKS4 and SOCKS5 protocols can be specified.

...