| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| MQ-IPT (Internet Pass Thru) : pro and cons ? |
« View previous topic :: View next topic » |
| Author |
Message
|
| bcostacurta |
 Posted: Tue Mar 09, 2010 4:45 am Post subject: MQ-IPT (Internet Pass Thru) : pro and cons ? |
 |
|
Acolyte
Joined: 10 Dec 2009
Posts: 71
Location: Luxembourg
|
Dears,
we consider to use MQ-IPT (Internet Pass Thru) in my company.
What will be your pro and cons about this product from IBM ?
Thanks for your return of experience.
Bye,
Bruno |
|
| Back to top |
|
 |
| fjb_saper |
| Posted: Tue Mar 09, 2010 2:39 pm Post subject: Re: MQ-IPT (Internet Pass Thru) : pro and cons ? |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
( 7 )
| bcostacurta wrote: |
Dears,
we consider to use MQ-IPT (Internet Pass Thru) in my company.
What will be your pro and cons about this product from IBM ?
Thanks for your return of experience.
Bye,
Bruno |
If you do not want to trouble yourself with qmgr SSL security or just need an entry point that is in the DMZ MQIPT is the way to go.
Have fun 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| saneben |
| Posted: Sun Nov 07, 2010 9:43 pm Post subject: MQ IPT |
|
|
Voyager
Joined: 04 Apr 2004
Posts: 96
|
Hi,
We have a clustered QM on aix 7.0.1.1 which has to be company to an external company who are using MQ clustering on V6.0 which is in another country and we have a firewall between us and the company.
So we would like to use the IPT support pac on an iintermediate server
some simple questions like we have not used the IPT before
1) when we create the cluster sender channels how to connect to the IPT 2) does it support clustering?
3) does the IPT become a single point of failure if the IPT crashes?
4) we do not want SSL at the moment but will any MQ auth rights has to be given?
Regards |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Sun Nov 07, 2010 10:30 pm Post subject: Re: MQ IPT |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| saneben wrote: |
Hi,
We have a clustered QM on aix 7.0.1.1 which has to be company to an external company who are using MQ clustering on V6.0 which is in another country and we have a firewall between us and the company.
So we would like to use the IPT support pac on an iintermediate server
some simple questions like we have not used the IPT before
1) when we create the cluster sender channels how to connect to the IPT 2) does it support clustering?
3) does the IPT become a single point of failure if the IPT crashes?
4) we do not want SSL at the moment but will any MQ auth rights has to be given?
Regards |
For security reasons you don't want any foreign company qmgr in your cluster. You need it to have a peer to peer connection to a qmgr in your cluster (gateway).
When creating the peer to peer channel give the mqipt server and forwarding port as conname.
Typically you'd have qmgr a->mqipt a ->mqipt b -> qmgr b and
qmgr b ->mqipt b -> mqipt a -> qmgra.
You can also exchange qmgr b for client b and then you don't need the route from a to b but only the route from b to a.
For the rest of your questions
1&2) yes but you need to be very careful. It would not be advisable though... I would refrain from clustering.
3) It can be a single point of failure. But you can replace it rapidly and easily. You can also load balance 2 mqipt boxes with Big IP or some other network hardware. This takes care of your single point of failure if you also have an HA gateway qmgr.
4) the channel used should have an MCAuser set with the corresponding rights. And coming from outside the MQ channel does not need SSL however the mqipt to mqipt leg should be using SSL.
Have fun
_________________
MQ & Broker admin |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
