| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQIPT question |
« View previous topic :: View next topic » |
| Author |
Message
|
| gdrucker |
 Posted: Wed Feb 08, 2006 8:06 am Post subject: MQIPT question |
 |
|
Apprentice
Joined: 17 Jun 2005
Posts: 36
Location: New York
|
Hi all,
We are discussing a new connection using MQIPT and I could use some help. We are running MQ V5.3 and want to connect to a customer server running MQIPT. I know that I can design a connection directly from my MQ server. If I want to use SSL encryption/authentication, then do I need IPT <---> IPT, or can I still go MQ <---> IPT? |
|
| Back to top |
|
 |
| mvic |
| Posted: Wed Feb 08, 2006 9:10 am Post subject: Re: MQIPT question |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| gdrucker wrote: |
| If I want to use SSL encryption/authentication, then do I need IPT <---> IPT, or can I still go MQ <---> IPT? |
With MQ v5.3 and v6, you can set up qmgr-to-qmgr and client-to-qmgr channels using SSL encryption and certificate-based authentication.
Because of this, I don't think MQIPT is needed any more. (Anyone disagree?) Hopefully this helps. |
|
| Back to top |
|
|
| jefflowrey |
| Posted: Wed Feb 08, 2006 9:15 am Post subject: |
|
|
Grand Poobah
Joined: 16 Oct 2002
Posts: 19981
|
MQIPT can be very helpful in certain cases, particularly for gatewaying MQ traffic over HTTP/HTTPS.
There has been some previous discussion here about implementing MQ SSL over MQIPT. I think if you search for MQIPT, you'll find some helpful stuff.
But I'm not an expert in anyway, so other than these general comments, I've got nothing else to say.
_________________
I am *not* the model of the modern major general. |
|
| Back to top |
|
|
| gdrucker |
| Posted: Wed Feb 08, 2006 9:16 am Post subject: |
|
|
Apprentice
Joined: 17 Jun 2005
Posts: 36
Location: New York
|
| That may be true, but in my situation, I have a customer that insists on us connecting through the MQIPT server to get to MQserver. This may not be an issue because we will probably choose MQIPT <---> MQIPT using HTTPS. Thanks. |
|
| Back to top |
|
|
| mvic |
| Posted: Wed Feb 08, 2006 9:25 am Post subject: |
|
|
Jedi
Joined: 09 Mar 2004
Posts: 2080
|
| jefflowrey wrote: |
| gatewaying MQ traffic over HTTP/HTTPS. |
Ah yes, how did I forget?  |
|
| Back to top |
|
|
| HubertKleinmanns |
| Posted: Wed Feb 08, 2006 10:44 am Post subject: Re: MQIPT question |
|
|
Shaman
Joined: 24 Feb 2004
Posts: 732
Location: Germany
|
| mvic wrote: |
| gdrucker wrote: |
| If I want to use SSL encryption/authentication, then do I need IPT <---> IPT, or can I still go MQ <---> IPT? |
With MQ v5.3 and v6, you can set up qmgr-to-qmgr and client-to-qmgr channels using SSL encryption and certificate-based authentication.
Because of this, I don't think MQIPT is needed any more. (Anyone disagree?) Hopefully this helps. |
mvic,
I disagree  . When you set up QMgr connections through firewalls, then normally you have to put a QMgr in the DMZ (demilitarized zone), which is insecure by definition. This QMgr holds at least a XmitQ, in which the messages are stored locally unencrypted.
MQ IPT does not store messages in queues, so you do not have any storage, which an invader may read.
_________________
Regards
Hubert |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
