Properties that affect reverse proxy use

To connect through a reverse-proxy server, you can set the properties in Table 12-2. You must set these properties in addition to any properties that you would set to connect directly to EAServer.

Table 12-2: Properties that affect reverse proxy use

C++/ActiveX/ PowerBuilder property

CORBA property

EJB property

To indicate

ORBProxyHost or environment variable JAG_PROXYHOST

com.sybase.CORBA. ProxyHost

com.sybase.ejb. ProxyHost

Specifies the machine name or the IP address of the reverse-proxy server.

ORBProxyPort or environment variable JAG_PROXYPORT

com.sybase.CORBA. ProxyPort

com.sybase.ejb. ProxyPort

Specifies the port number of the reverse-proxy server, typically 80 for HTTP-tunnelled connections or 443 for SSL (HTTPS-tunnelled) connections.

ORBHttp or environment variable JAG_HTTP

com.sybase.CORBA. http

com.sybase.ejb. http

Set this property to true if the reverse-proxy server requires HTTP-tunneled connections. If you do not set this property, connections still go through, but only after the client ORB first tries to open an IIOP connection. Setting the property eliminates the overhead that is incurred by trying plain IIOP each time a connection is made.

ORBforceSSL or environment variable JAG_FORCESSL

com.sybase.CORBA. forceSSL

com.sybase.ejb. forceSSL

Set this property to true if the connection to the reverse proxy must use SSL (HTTPS) tunnelling, but the connection from the proxy to the EAServer does not use SSL tunnelling.

ORBqop or environment variable JAG_QOP

com.sybase.CORBA. qop

com.sybase.ejb. qop

In applications that connect to a proxy using SSL (HTTPS) tunnelling, set the Quality Of Protection (QOP) to a security characteristic that matches the one supported by the reverse-proxy server. See “Configuring security profiles” for more information. If the connection to the proxy server requires SSL, but the connection from the proxy does not, do not set the QOP; instead, set the forceSSL property to true.

Do not set QOP in Java applets that use SSL. Instead, code the applet to connect to a listener that supports the required security level. See “Using SSL in Java applets” for more information.

N/A.

com.sybase.CORBA. autoProxy

com.sybase.ejb. autoProxy

In Java applets, set this property to true to enable connections to a reverse-proxy server. You must also configure your applet to download through the reverse-proxy server itself. The default is false. This property is ignored if the client is not a Java applet, or has not initialized the Java ORB with the ORB.init method that takes an Applet parameter.

When automatic proxy is enabled, the ORB uses the applet’s download address as the reverse-proxy server address. If the port number is 443, SSL (HTTPS tunnelling) is used; otherwise, HTTP tunnelling is used.