Kbase P90769: How to setup AppServer and two NameServers with Firewall in between
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
28/09/2004 |
|
Status: Unverified
GOAL:
How to setup AppServer and two NameServers with Firewall in between
FIX:
The required configuration is:
Internet - host 'EXTserver' (with NSext) - Firewall - host 'INTserver' (with NSint and AppServer)
Components to be deployed and ports to be opened are as follows:
Host 'EXTserver':
- runs AdminServer
- runs NameServer 'NSext'
- has NameServer 'NSremote' defined with host name of
'INTserver' and its 'NSint' NameServer UDP port number
- NameServer 'NSremote' configured as a neighboring NameServer of 'NSext'
Firewall:
- open UDP port number to NameServer 'NSint' on host 'INTserver'
- open all UDP ports from host 'INTserver' to 'EXTserver'
- open TCP port to AppServer broker on host 'INTserver'
- if using statereset or stateaware AppServer, then open port range to
host 'INTserver' as specified with the AppServer's srvrMinPort and
srvrMaxPort parameters
Host 'INTserver':
- runs AdminServer
- runs NameServer 'NSint' (defined with NameServer 'NSremote' on host 'EXTserver')
- runs AppServer broker registered with the NameServer 'NSint' using
the host name which is resolvable by external DNS to the
firewall's NAT if such exists.