Introduction

This document describes how the Gateway Client for Wiiisdom Cloud Platform (WCP) integrates with the customer's private network and Tableau Server. It explains the architecture, communication protocol, and key technical considerations for deployment and operation.

Architecture Schema

Glossary

• Gateway Client: A service deployed inside the customer's private network. It establishes a secure, bi-directional connection to the Wiiisdom Cloud Platform.
• Gateway Server: A component that routes requests from Wiiisdom Cloud Platform to Tableau Server through the Gateway Client.

Communication Protocol

The Gateway Client and Gateway Server communicate using the WebSocket Secure (WSS) protocol:

• Protocol: WebSocket Secure (wss://)
• Security: Encrypted using TLS for confidentiality and integrity.
• Authentication: The Gateway Client authenticates to the Gateway Server using a Client ID and Client Secret, which are managed within Wiiisdom Cloud Platform.

Technical Details

1. Service Installation

   Installing the Gateway Client creates a persistent service on the operating system. This service automatically re-establishes the connection to the Gateway Server after system restarts.

2. Proxy Support

   The Gateway Client can be configured to connect through an HTTP Proxy if required by the customer's network policies.

3. Logging

   All requests initiated by the Gateway Server are logged by the Gateway Client. Logs are stored in the installation directory for auditing and troubleshooting.

Security Considerations

• All communication between the Gateway Client and Gateway Server is encrypted using TLS.
• Authentication credentials (Client ID and Client Secret) should be stored securely and rotated periodically.
• Ensure proper firewall rules to allow outbound WSS traffic from the Gateway Client to the Gateway Server.