Designates the route to use for a connection from the current Replication Server to a remote Replication Server.
create route to dest_replication_server { set next site [to] thru_replication_server | [set username [to] user] [set password [to] passwd] [set route_param to 'value' [set route_param to 'value']... ] [set security_param to 'value' [set security_param to 'value']... ]}
The destination Replication Server.
The intermediate Replication Server through which to pass messages for the destination Replication Server. Specify this when creating an indirect route.
The Replication Server login name to use to log in to the destination Replication Server. This is the login name used by the RSI user thread. If no user name is entered, Replication Server uses the principal user name entered with the -S flag when Replication Server was started.
The password to use with the login name. If no password is entered, Replication uses a null value.
a parameter that affects routes. See Table 3-16 for a list of parameters and values.
a character string containing a value for a parameter.
Specifies the name of a security parameter. Refer to Table 3-27 for a list and description of security parameters that can be set with create route.
security_param |
value |
---|---|
msg_confidentiality |
Indicates whether Replication Server sends and receives encrypted data. If set to “required,” outgoing data is encrypted. If set to “not required,” Replication Server accepts incoming data that is encrypted or not encrypted. Default: not_required |
msg_integrity |
Indicates whether data is checked for tampering. Default: not_required |
msg_origin_check |
Indicates whether the source of data should be verified. Default: not_required |
msg_replay_detection |
Indicates whether data should be checked to make sure it has not been read or intercepted. Default: not_required |
msg_sequence_check |
Indicates whether data should be checked for interception. Default: not_required |
mutual_auth |
Requires remote server to provide proof of identify before a connection is established. Default: not_required |
security_mechanism |
The name of the third-party security mechanism enabled for the pathway. Default: first mechanism listed in the SECURITY section of libtcl.cfg |
unified_login |
Indicates how Replication Server seeks to log in to remote data servers and accepts incoming logins. The values are:
Default: not_required |
use_security_services |
Tells Replication Server whether to use security services. If use_security_services is “off,” no security features take effect. This parameter can only be set by configure replication server. |
Entered at the TOKYO_RS Replication Server, this command creates a direct route from TOKYO_RS to the SYDNEY_RS Replication Server. TOKYO_RS can log in to SYDNEY_RS over this route, using the login name “sydney_rsi” with the password “sydney_rsi_ps:”
create route to SYDNEY_RS set username sydney_rsi set password sydney_rsi_ps
Entered at TOKYO_RS, this command creates an indirect route from TOKYO_RS to SYDNEY_RS, through the intermediate Replication Server, MANILA_RS. Direct routes must already exist from TOKYO_RS to MANILA_RS and from MANILA_RS to SYDNEY_RS:
create route to SYDNEY_RS set next site MANILA_RS
This command creates a direct route similar to that in the first example. However, if network-based security is enabled, TOKYO_RS must log in to SYDNEY_RS with a credential:
create route to SYDNEY_RS set unified_login 'required'
Use create route to create a direct or indirect route from the current Replication Server to a remote Replication Server.
Before creating a route, you should have determined your overall routing scheme. See the Replication Server Administration Guide Volume 1 for information on creating and managing routes.
Replication Server does not support routing schemes where routes diverge from the same source Replication Server, then converge at the same intermediate or destination Replication Server.
Replication Server distributes information about the new route to qualifying sites through the replication system. The changes do not appear immediately at all such sites because of normal replication system lag time.
If Replication Server is configured with Embedded RSSD (ERSSD), you can create a route as long as both Replication Servers are 15.0 or higher. If the route being created is the first route originating from the current site, log transfer will be started and a Replication Agent will be started automatically:
To change the Replication Agent’s name, enter:
configure replication server set erssd_ra to 'value'
Specify an RSI user name and password and omit the next site clause from create route to set up a direct route from the current Replication Server to the destination Replication Server.
Before you create a direct route, create login names and passwords in the destination Replication Server. You can use rs_init to set these up; the default user name is “RS_name_rsi” and the default password is “RS_name_rsi_ps.”
If a route is created with a user and password that do not exist at the destination Replication Server, add or change the user and password at that destination.
Include the next site clause in create route to set up an indirect route for Replication Server messages. For example, messages originating in New York and destined for all European sites can be routed through a London site, along an indirect route. Using indirect routes decreases the volume of messages passed through a portion of the route.
Before you create an indirect route, you must first create a direct route from the source Replication Server to the intermediate Replication Server, and from the intermediate Replication Server to the destination Replication Server.
A route can have any number of intermediate Replication Servers. However, because each additional intermediate Replication Server increases the lag time between the primary and replicate sites, you should limit the number of intermediate sites.
The RSI user name and password you specify when you create a direct route is added to the rs_users system table in the RSSD of the destination Replication Server. The user name and password are also added to the rs_maintusers system table in the RSSD of the source Replication Server.
When you create a route, the source Replication Server sends the destination Replication Server the login name and password of the source RSSD’s primary user. The destination Replication Server uses this login to create subscriptions to some of the RSSD system tables at the source Replication Server. This primary user login name is usually named “source_RSSD_name_prim,” and is stored in the rs_users system table at the destination Replication Server.
Both ends of a route must use compatible Security Control Layer (SCL) drivers with the same security mechanisms and security features. It is the replication system Administrator’s responsibility to choose and set security features for each server. The Replication Server does not query the security features of remote servers before it attempts to establish a connection.
create route specifies network-based security settings that affect how the current Replication Server logs in to the target Replication Server and how secure message transmission is accomplished.
If unified_login is set to “required,” only the “sa” user can log in to the Replication Server without a credential. If the security mechanism should fail, the “sa” user can then log in to Replication Server with a password and disable unified_login.
A Replication Server can have more than one security mechanism; each supported mechanism is listed in the libtcl.cfg file under SECURITY.
Message encryption is a costly process with severe performance penalties. In most instances, it may be wise to set msg_confidentiality “on” only for certain routes. Alternatively, choose a less costly security feature, such as msg_integrity.
create route requires “sa” permission.
alter connection, alter route, configure replication server, create connection, drop connection, drop route