Tarantella Administration Guide
> Security
> Using Tarantella with the HTTPS port through a firewall
Using Tarantella with the HTTPS port through a firewall
|
Your firewall only allows web access from the Internet via port
443. You need Tarantella to use this port as well.
|
|
Reconfigure Tarantella to listen on port 443. Then use
the Firewall Forwarding facility to allow Tarantella to
forward any traffic not related to Tarantella to your
web server.
|
Case study
Indigo Insurance, has their firewall configured to only allow HTTPS
access (on port 443) from the Internet. They do not want to open any
additional ports so their array of Tarantella servers
must use the same port as well.
Solution
- In Array Manager, select Array and click the Properties button.
- Change Port Numbers, Encrypted connections from 5307 to 443.
- For each Tarantella server in the array, use
tarantella config list
--array-port-encrypted to check that the change to the port number
has taken effect.
- Reconfigure each web server in the array to listen on local host
port 443:
- Apache: In
httpd.conf, change Listen 443 to Listen
127.0.0.1:443.
- Netscape Enterprise: In Server Manager, click Network Settings
on the Preferences tab and set Bind To Address to 127.0.0.1.
- Netscape Fasttrack: In the web server config, click System Settings,
Network Settings and set Bind To Address to 127.0.0.1.
After configuring a web server in the array, restart it.
- For each Tarantella server in the array, select Security
properties and set Firewall Forwarding URL to
https://127.0.0.1:443.
(Alternatively, type tarantella config edit --security-firewallurl https://127.0.0.1:443
from a command line.)
- Restart each Tarantella server in the array using the
tarantella restart
command.
Next steps
- To disable secure connections for an array if firewall
forwarding is already running:
1. Set the port for encrypted connections to 5307.
2. Set the port for unencrypted connections to 443.
3. Use the tarantella security stop --array
command.
4. Restart each Tarantella server in the array using the
tarantella restart
command.
- To enable secure connections for an array if firewall
forwarding is already running:
1. Set the port for unencrypted connections to 3144.
2. Set the port for encrypted connections to 443.
3. Use the tarantella security start --array command.
4. Restart each Tarantella server in the array using the
tarantella restart
command.