Yes, I was just writing an answer when the vpn suggestion came up. I think using Tink would be a nice approach: http://tinc-vpn.org/ You can also build a meshed VPN with tink, so you get failover as well. Tink does automatically restart, the virtual nics can be bridged to inside networks if needed. Kind regards, Christian Polzer On 07.02.2011, at 16:51, Dirkjan Ochtman wrote: > On Mon, Feb 7, 2011 at 16:44, Robert Johnson wrote: >> Advice and guidance would be very gratefully received, but please bear in mind that whilst I am a pretty good application developer, my networking knowledge generally and proxy / firewall knowledge specifically is limited to principals and not practice so if you could explain the details of any suggestions in detail at a "put this line in this file" type level I would be eternally grateful. > > Or you could use a VPN (virtual private network; an encrypted channel > tunneled over the internet). We use OpenVPN to do CouchDB replications > over the internet at work. It's free and fairly easy to set up. > > Cheers, > > Dirkjan