| Author |
Message
|
| Mitra |
 Posted: Mon May 09, 2011 7:10 am Post subject: Can we Cluster a qmgr that is in DMZ |
 |
|
Voyager
Joined: 21 Mar 2011
Posts: 78
|
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
|
| Back to top |
|
 |
| Vitor |
| Posted: Mon May 09, 2011 7:14 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Mitra wrote: |
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
Of course. It's just network links.
Obviously configuration, security and other considerations come into play. But one queue manager doesn't know where another queue manager is, just the network parameters needed to reach it.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| Mitra |
| Posted: Mon May 09, 2011 7:20 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Voyager
Joined: 21 Mar 2011
Posts: 78
|
| Vitor wrote: |
| Mitra wrote: |
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
Of course. It's just network links.
Obviously configuration, security and other considerations come into play. But one queue manager doesn't know where another queue manager is, just the network parameters needed to reach it. |
Can u plz explain me more clearly
i understood that they can be clustered but why network parameters come into scenario? do you mean the name of the server and it's IP of the other qmgr has to be known by the 1st qmgr |
|
| Back to top |
|
|
| Vitor |
| Posted: Mon May 09, 2011 7:27 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Mitra wrote: |
| Can u plz explain me more clearly |
Not really. Queue managers are linked by channels, clustered queue managers are linked by cluster channels. These channels contain network information describing the connection.
A DMZ is simply a particular network configuration created for a particular reason, typically for security reasons to prevent unauthorised intrusion. A queue manager inside a DMZ can be connected to a queue manager outside a DMZ in the same way any server / application inside a DMZ can be connected to a server / application outside a DMZ. Making & securing such a connection to preserve the integrity (and deciding such a connection is needed) is standard stuff.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| mqjeff |
| Posted: Mon May 09, 2011 7:40 am Post subject: |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
The thing to remember is that any qmgr that is in a cluster will likely end up trying to establish network links to every other qmgr that is in that cluster.
So if you put one qmgr in a cluster in the DMZ, then you will have to ensure that the network allows that one qmgr to connect to every other qmgr in the entire cluster.
And this may seem to be a security consideration. So you should consider it. |
|
| Back to top |
|
|
| gbaddeley |
| Posted: Mon May 09, 2011 3:45 pm Post subject: |
|
|
Jedi Knight
Joined: 25 Mar 2003
Posts: 2538
Location: Melbourne, Australia
|
| mqjeff wrote: |
| ...So if you put one qmgr in a cluster in the DMZ, then you will have to ensure that the network allows that one qmgr to connect to every other qmgr in the entire cluster... |
Yes.
The CONNAME parameter is critical in all CLUSRCVR channels. The specified host must be resolvable by all queue managers in the cluster and the port must be open on traversed firewalls.
_________________
Glenn |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Mon May 09, 2011 5:23 pm Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
| Mitra wrote: |
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
Is your intent to use the cluster qmgr in your DMZ as a gateway to other qmgrs inside your firewall?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
| fjb_saper |
| Posted: Mon May 09, 2011 7:43 pm Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Grand High Poobah
Joined: 18 Nov 2003
Posts: 20756
Location: LI,NY
|
| bruce2359 wrote: |
| Mitra wrote: |
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
Is your intent to use the cluster qmgr in your DMZ as a gateway to other qmgrs inside your firewall? |
Have you thought about using MQIPT instead of a qmgr in your DMZ 
_________________
MQ & Broker admin |
|
| Back to top |
|
|
| Mitra |
| Posted: Fri May 20, 2011 7:28 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Voyager
Joined: 21 Mar 2011
Posts: 78
|
| fjb_saper wrote: |
| bruce2359 wrote: |
| Mitra wrote: |
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
Is your intent to use the cluster qmgr in your DMZ as a gateway to other qmgrs inside your firewall? |
Have you thought about using MQIPT instead of a qmgr in your DMZ |
What is MQIPT?
Last edited by Mitra on Fri May 20, 2011 7:49 am; edited 1 time in total |
|
| Back to top |
|
|
| mqjeff |
| Posted: Fri May 20, 2011 7:31 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
| Mitra wrote: |
| fjb_saper wrote: |
| bruce2359 wrote: |
| Mitra wrote: |
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
Is your intent to use the cluster qmgr in your DMZ as a gateway to other qmgrs inside your firewall? |
Have you thought about using MQIPT instead of a qmgr in your DMZ |
What is MQPIT? |
MQPIT is where we throw you for not providing information in your questions that indicates the research you've done.
MQ*I*P*T* is MQ Internet PassThru - and is a SupportPac. |
|
| Back to top |
|
|
| Mitra |
| Posted: Fri May 20, 2011 7:51 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Voyager
Joined: 21 Mar 2011
Posts: 78
|
| mqjeff wrote: |
| Mitra wrote: |
| fjb_saper wrote: |
| bruce2359 wrote: |
| Mitra wrote: |
| Can we cluster a Qmgr that is in DMZ with a qmgr that is outside DMZ? |
Is your intent to use the cluster qmgr in your DMZ as a gateway to other qmgrs inside your firewall? |
Have you thought about using MQIPT instead of a qmgr in your DMZ |
What is MQPIT? |
MQPIT is where we throw you for not providing information in your questions that indicates the research you've done.
MQ*I*P*T* is MQ Internet PassThru - and is a SupportPac. |
Sorry, Can you give me some links so that i can learn about it.
will it be helpfull for the qmgr clustering inside the DMZ with qmgr outside DMZ? |
|
| Back to top |
|
|
| mqjeff |
| Posted: Fri May 20, 2011 7:54 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Grand Master
Joined: 25 Jun 2008
Posts: 17447
|
|
| Back to top |
|
|
| Vitor |
| Posted: Fri May 20, 2011 7:56 am Post subject: Re: Can we Cluster a qmgr that is in DMZ |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| Mitra wrote: |
| Sorry, Can you give me some links so that i can learn about it. |
You were told it was a Support Pac. If you read the top of this very page you'll see a link marked "SupportPacs".
Alternatively there's a tool called "Google" which a lot of people use for something called "research" - that's when you try and work out what to do yourself rather than repeatedly posting on an Internet forum in the hope someone will explain exactly what you need to do to build a High Availibility solution from WMQ rather than Veritas. 
| Mitra wrote: |
| will it be helpfull for the qmgr clustering inside the DMZ with qmgr outside DMZ? |
Well that depends on how you set it up, how you use it and your network topology. Look at the documentation and see what you think.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
|
|
