Kbase 20622: WebSpeed 3.x and Open Edge : Ports that Should be Opened on Firewall
Autor |
  Progress Software Corporation - Progress |
Acesso |
  Público |
Publicação |
  20/03/2008 |
|
Status: Unverified
GOAL:
What ports should be open in a firewall configuration between a computer that has the WebSpeed Messenger and a computer that has the NameServer and Transaction server?
GOAL:
Webspeed configuration in a firewall environment
GOAL:
How to configure webspeed with firewall?
FACT(s) (Environment):
WebSpeed 2.x
WebSpeed 3.x
OpenEdge 10.x
FIX:
This solution discusses the ports that should be open in a firewall configuration between a computer that has the WebSpeed Messenger and a computer that has the NameServer and Transaction server as shown in the following example:
An example setup:
COMPUTER A | COMPUTER B
Web Server | NameServer
Messenger | Transaction Server
| Database
|
Firewall
The key to a successful firewall is to make sure that ports are open on the firewall that correspond to the ports you are using. Given the configuration in the above example, you should open the following ports in the indicated directions:
- Open up a 1-way (inbound) UDP NameServer listening port between Messenger and NameServer.
Messenger and brokers communicates with the NameServer on this port(port 5162, assuming the NameServer default port).
- Open up a 1-way (Outbound) set of UDP ports from the NameServer to the Messenger.
Prior to version 9.1B/3.1B, the port assigned for the response back to the messenger can be any port in the range of 1024 to 65535.
For 9.1B / 3.1B, these ports can be specified under the Messenger configuration (by default they are not set):
maxNSClientPort=3325
minNSClientPort=3301
- Open up a 2-way set of TCP ports for the Messenger and the WebSpeed broker.
(port 3055, assuming the default WS broker port.)
- Open up a 2-way set of TCP ports for agent communications between agents and the Messenger.
(ports 3202 - 3502, assuming the default agents ports.)
Agents ports are specified under the WS broker configuration as:
srvrMaxPort=3502
srvrMinPort=3202