Patent ID: 8843998

Claim:
A processor-implemented method comprising: establishing at least one secure tunnel between a first proxy, wherein the first proxy is identified by a first network address and a first port number on a private infrastructure, and a second proxy associated with a distributed computing application executing on a public cloud infrastructure, wherein the second proxy is identified by a second network address and a second port number; limiting access requests received from the distributed application to at least one selected application service from a plurality of application services available on the private infrastructure, wherein the access requests are initiated using the second network address and second port number, wherein limiting access comprises: receiving by the first proxy, the access requests from the distributed computing application, wherein the distributed computing application is configured with access information comprising the second network address and the second port number to access the at least one selected application service through the second proxy over the secure tunnel upon verification that the distributed computing application is authorized to access the second network address and second port number, the access requests comprising the first network address and first port number, wherein the first proxy determines if the access requests are for the at least one selected application service and limits the forwarding of access requests to those access requests specifically directed to the at least one selected service by disabling forwarding of access requests not directed to the at least one selected application service.