|

SSL connections for cache replication

View: New views

3 Messages — Rating Filter: Alert me

	SSL connections for cache replication by Istvan Soos :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Hi, EHCache cache replication is great, but there is sometimes a requirement to encrypt the communication channel of the network. Is there any option to encrypt the connection of the cache replication (with any replication mechanism)? SSL would be preferred, but haven't found any documentation how this could be achieved. I hope it is not much work... Thanks for your help, Istvan ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ ehcache-list mailing list ehcache-list@... https://lists.sourceforge.net/lists/listinfo/ehcache-list
	Re: SSL connections for cache replication by gregluck :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Istvan See http://java.sun.com/j2se/1.4.2/docs/guide/rmi/socketfactory/SSLInfo.html The bad news is that this would require patching to the RMI replicator and the RMICachePeer. So, a lot of hassle. You could set up ssh port forwarding (see http://www.securityfocus.com/infocus/1816) but you would need to do it for each port, and of course in each direction. Finally you can proxy RMI through HTTP. See http://www.rmiproxy.com/doc/FAQ.html In short, all of this is too hard. I think a better solution is to set up a VPN tunnel between your machines. I have recently done this, on BSD of all OSs, using Raccoon. Raccoon is available on Linux, Mac OS X, Free BSD. It is highly reliable and places moderate cpu demands. Your sysadmins should be able to set that up. That way you need to make no config changes to you app. Regards Greg Luck web: http://gregluck.com skype: gregrluck yahoo: gregrluck mobile: +61 408 061 622 On 19/01/2009, at 8:05 PM, Istvan Soos wrote: Hi, EHCache cache replication is great, but there is sometimes a requirement to encrypt the communication channel of the network. Is there any option to encrypt the connection of the cache replication (with any replication mechanism)? SSL would be preferred, but haven't found any documentation how this could be achieved. I hope it is not much work... Thanks for your help, Istvan ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ ehcache-list mailing list ehcache-list@... https://lists.sourceforge.net/lists/listinfo/ehcache-list ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ ehcache-list mailing list ehcache-list@... https://lists.sourceforge.net/lists/listinfo/ehcache-list
	Re: SSL connections for cache replication by Istvan Soos :: Rate this Message: Reply to Author \| View Threaded \| Show Only this Message Hi Greg, Thanks for the answer! We will stay with the port-forward option. Regards, Istvan On Feb 4, 2009, at 8:55 AM, Greg Luck wrote: Istvan See http://java.sun.com/j2se/1.4.2/docs/guide/rmi/socketfactory/SSLInfo.html The bad news is that this would require patching to the RMI replicator and the RMICachePeer. So, a lot of hassle. You could set up ssh port forwarding (see http://www.securityfocus.com/infocus/1816) but you would need to do it for each port, and of course in each direction. Finally you can proxy RMI through HTTP. See http://www.rmiproxy.com/doc/FAQ.html In short, all of this is too hard. I think a better solution is to set up a VPN tunnel between your machines. I have recently done this, on BSD of all OSs, using Raccoon. Raccoon is available on Linux, Mac OS X, Free BSD. It is highly reliable and places moderate cpu demands. Your sysadmins should be able to set that up. That way you need to make no config changes to you app. Regards Greg Luck web: http://gregluck.com skype: gregrluck yahoo: gregrluck mobile: +61 408 061 622 On 19/01/2009, at 8:05 PM, Istvan Soos wrote: Hi, EHCache cache replication is great, but there is sometimes a requirement to encrypt the communication channel of the network. Is there any option to encrypt the connection of the cache replication (with any replication mechanism)? SSL would be preferred, but haven't found any documentation how this could be achieved. I hope it is not much work... Thanks for your help, Istvan ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ ehcache-list mailing list ehcache-list@... https://lists.sourceforge.net/lists/listinfo/ehcache-list ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD http://p.sf.net/sfu/XcvMzF8H _______________________________________________ ehcache-list mailing list ehcache-list@... https://lists.sourceforge.net/lists/listinfo/ehcache-list ------------------------------------------------------------------------------ Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are powering Web 2.0 with engaging, cross-platform capabilities. Quickly and easily build your RIAs with Flex Builder, the Eclipse(TM)based development software that enables intelligent coding and step-through debugging. Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com _______________________________________________ ehcache-list mailing list ehcache-list@... https://lists.sourceforge.net/lists/listinfo/ehcache-list