| Author |
Message
|
| lamtbs |
 Posted: Tue Jan 15, 2019 2:19 am Post subject: MQ AMS Pub/Sub support |
 |
|
Acolyte
Joined: 07 Nov 2005
Posts: 57
Location: Hong Kong
|
Dear all,
I suppose AMS still does not support pubsub model?
If all we are concerned is to protect / encrypt data AT REST, what would be a workaround?
Thank you!
Teresa |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Jan 15, 2019 5:03 am Post subject: Re: MQ AMS Pub/Sub support |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| lamtbs wrote: |
Dear all,
I suppose AMS still does not support pubsub model?
If all we are concerned is to protect / encrypt data AT REST, what would be a workaround?
Thank you!
Teresa |
Instead of trying to publish the unencrypted data, publish the encrypted data.
i.e. first put with AMS to QA
retrieve using ALIAS QA and publish
subscription on QB
retrieve with AMS from ALIAS QB...
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Tue Jan 15, 2019 7:59 am Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
|
| Back to top |
|
|
| Vitor |
| Posted: Tue Jan 15, 2019 8:01 am Post subject: Re: MQ AMS Pub/Sub support |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| lamtbs wrote: |
| If all we are concerned is to protect / encrypt data AT REST, what would be a workaround? |
Encrypt the disc at a hardware or OS level.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| RogerLacroix |
| Posted: Wed Jan 16, 2019 11:36 am Post subject: Re: MQ AMS Pub/Sub support |
|
|
Jedi Knight
Joined: 15 May 2001
Posts: 3264
Location: London, ON Canada
|
| lamtbs wrote: |
I suppose AMS still does not support pubsub model?
If all we are concerned is to protect / encrypt data AT REST, what would be a workaround? |
Still true. Why don't you have a look at MQ Message Encryption (MQME). MQME supports both point-to-point and Pub/Sub topology for message encryption/decryption (i.e. data at rest).
Regards,
Roger Lacroix
Capitalware Inc.
_________________
Capitalware: Transforming tomorrow into today.
Connected to MQ!
Twitter |
|
| Back to top |
|
|
| lamtbs |
| Posted: Thu Jan 17, 2019 1:24 am Post subject: |
|
|
Acolyte
Joined: 07 Nov 2005
Posts: 57
Location: Hong Kong
|
Thanks all,
looking at the "limitations" which says ....
Quote "It is possible for an application to publish to a topic via an alias queue definition that is protected by a policy, it is also possible for a subscribing application to get messages from a policy protected queue. It is not possible to assign a policy directly to a topic string, policies can only be assigned to queue definitions."
What does it mean by "publish to a topic via an alias queue"? Is that actually what fjb_saper was suggesting? ...... seems this is my workaround with pub/sub if confidentiality is the AMS option I use anyway? |
|
| Back to top |
|
|
| hughson |
| Posted: Thu Jan 17, 2019 2:56 pm Post subject: |
|
|
Padawan
Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand
|
| lamtbs wrote: |
| What does it mean by "publish to a topic via an alias queue"? Is that actually what fjb_saper was suggesting? |
Here's an example of that:-
Publish your MQ Event Messages
Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software |
|
| Back to top |
|
|
| lamtbs |
| Posted: Thu Jan 17, 2019 7:44 pm Post subject: |
|
|
Acolyte
Joined: 07 Nov 2005
Posts: 57
Location: Hong Kong
|
Thanks Morag!
So the publishing and subscribing application does NOT even need to be aware of the change to AMS (confidentiality option, at least)!! Great!!
Thanks all! |
|
| Back to top |
|
|
| hughson |
| Posted: Thu Jan 17, 2019 8:07 pm Post subject: |
|
|
Padawan
Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand
|
| lamtbs wrote: |
| So the publishing and subscribing application does NOT even need to be aware of the change to AMS (confidentiality option, at least)!! Great!! |
In general applications are not aware of the change to AMS. In this case - taking a publishing application and changing it to put to a queue, and taking a subscribing application and changing it to get from a queue probably means that they are aware?
Anyway, hopefully you have all the building blocks you need now. If you have any further questions, you know where to ask them. 
Cheers,
Morag
_________________
Morag Hughson @MoragHughson
IBM MQ Technical Education Specialist
Get your IBM MQ training here!
MQGem Software |
|
| Back to top |
|
|
| lamtbs |
| Posted: Thu Jan 17, 2019 10:58 pm Post subject: |
|
|
Acolyte
Joined: 07 Nov 2005
Posts: 57
Location: Hong Kong
|
 I misunderstood previously! Thanks for the clarifications! |
|
| Back to top |
|
|
| hughson |
| Posted: Fri Jan 18, 2019 1:45 pm Post subject: |
|
|
Padawan
Joined: 09 May 2013
Posts: 1959
Location: Bay of Plenty, New Zealand
|
|
| Back to top |
|
|
|
|
