The following topology graphic depicts how this scenario would be deployed in an enterprise environment. Neither the client nor the back-end server (or message broker) are aware of the reverse connection because it is completely transparent to the rest of the architecture.
The Gateway Enterprise Shield feature protects your trusted network by initiating the connection from the internal trusted network towards the DMZ.
For more information about Enterprise Shield™, see About Enterprise Shield™ from Kaazing.