The CLARUS protocol module allows running one or several protocol gateway(s) in charge of intercepting and of processing requests and responses between client applications and cloud services, and of protecting data on the fly. A protocol gateway applies one security policy that defines the protocol to intercept and the data operation technique to apply. Several protocol gateways can run at the same time. According to the security policy, a protocol gateway loads and uses the suitable protocol plug-in and the suitable dedicated protection module.

In the context of CLARUS project, the supported protocols are PostgreSQL and OGC WFS and the supported data operation techniques are those defined in this document.

Thanks to the plug-in mechanism, the CLARUS protocol module is an extensible application that can be enhanced with new plug-ins to support additional protocols or to support additional data protection techniques.