|
Home > Archive > WebSphere HTTP Server > April 2005 > Domino 6.5.1 HTTP server front end
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Domino 6.5.1 HTTP server front end
|
|
|
| I am attempting to use the IBM HTTP server, located in my DMZ to front end my Domino servers (multiple and cluster) which server iNotes, applications as well as Quickplace 6.5.1. This same HTTP server in the DMZ also serves Portal 5.0.2. We have the plugi
n-cfg.xml loaded and running for the portal servers. My question, to which I am looking for a clear answer: How ton configure the HTTP.CONF and exisinting plugin-cfg.xml to properly act as the DMZ front end host for the Domino servers. I have so far found
much confusing information, but no definitive answers. It appears that we need to do the following on the HTTP Server in the DMZ:
1.
Add virtual hosts for the 'public' names of the domino servers, ie: PubMail.xyz.com, pubQP.xyz.com, PubApps.xyz.com
Since we need to run HTTPS and SSL, we need to configure secondary IP addresses for each of these as SSL can not use virtual servers (not sure if this is true, put others suggested this is an issue)
2. Set up transports or reverse proxy statements to point the virtual server to the actual live server behind the firewall, ie. quickplaceserver.xyz.com, mailserver.xyz.com, appserver.xyz.com.
3. Set up URL re-writes so that links are re-written. Again, not sure of this or even how to do it.
4. Set up the SSL functions. We need to run SSL in the public side, but not sure if we should turn on SSL on Domino locally as some say this creates excess server load (however these are AIX p650's. Again, not sure.
5. I am sure much else that I have no idea about.
A sample config, if anyone would share, would be a great help
Thank you
Warren Smith
Enterprise Arch.
Affinia Group Inc.
815-759-7354
warren.smith@affiniagroup.com
| |
| Sunit Patke 2005-04-25, 6:08 pm |
| Are using WebSphere with your Domino apps?
Sunit
<warren.smith@dana.com> wrote in message
news:1649080668.1114347844693.JavaMail.wassrvr@ltsgwas007.sby.ibm.com...
>I am attempting to use the IBM HTTP server, located in my DMZ to front end
>my Domino servers (multiple and cluster) which server iNotes, applications
>as well as Quickplace 6.5.1. This same HTTP server in the DMZ also serves
>Portal 5.0.2. We have the plugin-cfg.xml loaded and running for the portal
>servers. My question, to which I am looking for a clear answer: How ton
>configure the HTTP.CONF and exisinting plugin-cfg.xml to properly act as
>the DMZ front end host for the Domino servers. I have so far found much
>confusing information, but no definitive answers. It appears that we need
>to do the following on the HTTP Server in the DMZ:
> 1.
> Add virtual hosts for the 'public' names of the domino servers, ie:
> PubMail.xyz.com, pubQP.xyz.com, PubApps.xyz.com
> Since we need to run HTTPS and SSL, we need to configure secondary IP
> addresses for each of these as SSL can not use virtual servers (not sure
> if this is true, put others suggested this is an issue)
>
> 2. Set up transports or reverse proxy statements to point the virtual
> server to the actual live server behind the firewall, ie.
> quickplaceserver.xyz.com, mailserver.xyz.com, appserver.xyz.com.
>
> 3. Set up URL re-writes so that links are re-written. Again, not sure of
> this or even how to do it.
>
> 4. Set up the SSL functions. We need to run SSL in the public side, but
> not sure if we should turn on SSL on Domino locally as some say this
> creates excess server load (however these are AIX p650's. Again, not
> sure.
>
> 5. I am sure much else that I have no idea about.
>
>
> A sample config, if anyone would share, would be a great help
>
> Thank you
>
> Warren Smith
> Enterprise Arch.
> Affinia Group Inc.
> 815-759-7354
> warren.smith@affiniagroup.com
| |
|
| Yes, portal 5.0.2 with proper patches applies. Within a month we should have 5.1 up and running. We have Sametime as well as QP and iNotes (DAP) portlets installed
| |
| Sunit Patke 2005-04-25, 6:08 pm |
| I am a little confused. If all Domino components/applications are being
served through the portal server as portlets. i.e. Users access the portal
and the portal accesses the Domino parts, why do you need to configure the
HTTP server to front-end the Domino applications?
I can attempt to answer some of the questions from your original post:
> Since we need to run HTTPS and SSL, we need to configure secondary IP
> addresses for each of these as SSL can not use virtual servers (not sure
> if this is true, put others suggested this is an issue)
If you do not do this then at least two of the websites accessed using SSL
will display a warning that the name on the certificate does not match the
site name. This is because the SSL handshake and session key establishment
occurs before HTTP traffic flows.
If you have to do this then I would recommend that you start an instance of
IHS just for your Domino applications and not use the same instance as used
by Portal.
<warren.smith@dana.com> wrote in message
news:1066121530.1114443723773.JavaMail.wassrvr@ltsgwas007.sby.ibm.com...
> Yes, portal 5.0.2 with proper patches applies. Within a month we should
> have 5.1 up and running. We have Sametime as well as QP and iNotes (DAP)
> portlets installed
|
|
|
|
|