File Transfer to On Prem Servers

OAuth‑secured Azure gateway moves blobs to on‑prem servers via Service Bus & worker service

Quick Facts

Technologies:

Platform:

Status:

Project URL:

Client:

C#, Azure Service Bus, Azure Blob Storage, Hosted Services, SQL Server, ASP.Net Core

Windows, Azure

Deployed (internal application)

Blue Scope Steel North America

Project Title

Secure File‑Transfer Gateway – Cloud‑to‑On‑Prem Delivery

Industry

Manufacturing / File‑Logistics & IT Operations

Technologies & Tools

ASP.NET Core Web API, IdentityServer (OAuth 2.0), Azure App Service, Azure Service Bus, Azure Blob Storage, C# Worker Services, SQL Server, Internal .NET SDK

Client

BlueScope Steel North America

Challenges

Outside‑in transfers: Vendors couldn’t reach BlueScope’s VPN‑protected file shares.
Enterprise‑grade security: Must satisfy SOC‑2 controls, MFA, and auditing.
Large payloads: Up to 10 GB per drop; latency spikes risked timeouts.
Reusable interface: Multiple internal apps needed a plug‑and‑play SDK.

Solution

OAuth‑Secured Ingress API
Azure App Service hosts multiple ASP.NET Core endpoint protected by IdentityServer.
Message‑Driven Workflow
Each upload request stores the files in Blob Storage and posts metadata to Azure Service Bus. This decouples the caller from on‑prem network latency.
On‑Prem Transfer Worker
A Windows Service running in BlueScope’s DMZ dequeues messages, streams blobs over SMB to designated file servers, and records checksums in SQL Server.
Extensible .NET SDK
Internal teams integrate with three lines of code—upload, query status, and receive webhook callbacks on completion.

Results

The solution enabled BlueScope to transfer files to their on prem file servers, ensured compliance, and gave BlueScope a scalable blueprint for any future cloud‑to‑on‑prem workflows.