# Airia Cloud Connector — A reverse tunnel that reaches into a private network without opening it.

> A self-contained agent a customer installs inside its own network. It dials out to the cloud platform and holds the connection open, so the platform can call internal APIs, query internal databases and reach internal MCP servers — without a single inbound firewall rule.

## Overview

A trimmed, single-file executable that runs inside a customer network and holds an outbound channel open to the cloud platform. Everything the platform needs on the other side of the firewall — an HTTP call, a database query, an MCP tool invocation — travels back down that one channel as a typed command.

## Stack

- .NET 9
- SignalR
- Redis
- JWT
- MCP
- xUnit
- Testcontainers
- Helm

## Highlights

- Outbound-only: the connector dials the cloud, never the other way round.
- Integration tests run against a real Redis through Testcontainers, not a fake.
- Queries relational engines and document stores on the private side, schema included.
- Exposes an internal MCP server’s tools to the platform through the same tunnel.
- Ships as one trimmed, self-contained executable, installable as a Windows service.

## Role

R&D Engineer — security, routing and command surface · Jun 2025 – Oct 2025. Closed-source professional work — the write-up describes it without the source.

---

Source: https://felipealmeida.tech/projects/airia-cloud-connector