Hacker News new | ask | show | jobs
by ianformanek 3539 days ago
Right, this would benefit from being a bit clearer.

Our backend query execution service connects to the customer's own DB as a client. The connection can be secured via SSH tunnel and firewall rules (for our NAT gateway IP addresses) - that way the database would never have to be exposed to the internet (as it never should be).