Copyright © TIBCO Software Inc. All rights reserved.
Copyright © TIBCO Software Inc. All rights reserved.


Chapter 9 Administering Firewall Port Ranges : Overview

Overview
If you are using iProcess Engine in a firewalled environment, you can define specific port ranges which the firewall administrator can add to the network firewall filter.
A port range is a specific range of either port numbers, RPC numbers or both. Once you have defined a port range, you can place the iProcess Engine node behind it. iProcess Engine processes will then only accept incoming RPC requests from within that port range.
Using Port Ranges with a Node Cluster
If your iProcess Engine uses a node cluster configuration, each server in the iProcess Engine node can sit behind the same port range, sit behind a different port range, or not sit behind a port range at all, according to your network configuration requirements.
How Port Range Information is Stored
Port range information is stored in the following tables in the iProcess Engine database:
port_range - contains the firewall data about individual port/RPC numbers that lie within each port range defined on this iProcess Engine node.
port_range_active - lists what port/RPC numbers are being actively used to provide RPC services by iProcess Engine processes.
port_range_conf - lists the port ranges currently defined for this iProcess Engine node.
port_range_nodes - lists which port range configurations are being used by which machines in the iProcess Engine node.
See "Firewall Port Ranges" in the appropriate database guide for more information about these tables.
How to Set up and use a Port Range
To set up and use a port range on iProcess Engine:
1.
Use the ADD_RANGE command to define the port range.
2.
Use the SET_RANGE command to place the required iProcess Engine server(s) behind the defined port range.
3.
Port Range swadm Commands
The following table summarizes all the swadm commands that you can use to administer port ranges. Each command is fully described in the following sections.

Copyright © TIBCO Software Inc. All rights reserved.
Copyright © TIBCO Software Inc. All rights reserved.