SSH tunnel (inbound, preferred)

When connecting to a database server, data.world allows you to optionally configure an SSH tunnel to connect through. This solution requires some setup on the part of the network administrator, but is more secure than a direct connection.

This is the preferred method for connecting database servers to data.world. It is easy, flexible and secure. No additional hardware is required beyond a bastion server. Many organizations have these deployed as a normal part of their infrastructure.

For additional security, data.world provides user specific SSH public keys which should be configured on the bastion server (in .authorized_keys) to ensure traffic is from data.world.