I do not want to build a web service layer within the network and expose that web service.
What is the best (i.e. secure with good performace) method of doing this?
SSH tunneling?
Opening a specific port on the db server and only allowing requests for a specific IP to access it?