What ports need to be opened between a web server, the AIA / WSA / REST Adapter, the NameServer and the AppServer ? - Progress Community

Loading

Skip to Main Content

What ports need to be opened between a web server, the AIA / WSA / REST Adapter, the NameServer and the AppServer ?

What ports need to be opened between a web server and/or a Java Servlet Engine, the AIA / WSA / REST Adapter, the NameServer and the AppServer ?

Dec 29, 2015
Knowledge

Title

What ports need to be opened between a web server, the AIA / WSA / REST Adapter, the NameServer and the AppServer ?

URL Name

P58464

Article Number

000138822

Environment

Product: Progress Version: 9.1x Product: OpenEdge Version: 10.x , 11.x OS: All supported platforms Other: JRun, ServletExec, Tomcat

Question/Problem Description

What ports need to be opened between a web server, the AIA / WSA / REST Adapter, the NameServer and the AppServer ?
What ports need to be opened between a Java Servlet Engine, the AIA / WSA / REST Adapter, the NameServer and the AppServer ?

What firewall ports need to be opened between a web server, the AppServer Internet Adapter, the NameServer and the AppServer ?
What firewall ports need to be opened between a web server, the Web Services Adapter, the NameServer and the AppServer ?
What firewall ports need to be opened between a web server, the REST Adapter, the NameServer and the AppServer ?

Steps to Reproduce

Clarifying Information

Error Message

Defect Number

Enhancement Number

Cause

Resolution

The ports that need to be opened between the Java Servlet Engine (JSE) running the AppServer Internet Adapter (AIA) / Web Services Adapter (WSA) / REST Adapter (RA) and the NameServer / AppServer are the same regardless of which specific JSE and web server is used. The only difference may result from the AppServer operating mode and whether the NameServer is used for the AIA / WSA / RA or not.

For the Stateless and State-free AppServer the ports that need to be open are:

AIA / WSA / RA client (random TCP port) --------> (fixed Tomcat TCP port) AIA / WSA / RA (random UDP port) --------> (fixed UDP port) NameServer
AIA / WSA / RA (random UDP port) <-------- (fixed UDP port) NameServer
AIA / WSA / RA client (random TCP port) <-------> (fixed Tomcat TCP port) AIA / WSA / RA (random TCP port) <-------> (fixed TCP port) AppServer Broker

For the State-reset and State-aware AppServer the ports that need to be open are:

AIA / WSA client (random TCP port) --------> (fixed Tomcat TCP port) AIA / WSA (random UDP port) --------> (fixed UDP port) NameServer
AIA / WSA (random UDP port) <-------- (fixed UDP port) NameServer
AIA / WSA client (random TCP port) <-------> (fixed Tomcat TCP port) AIA / WSA (random TCP port) <-------> (fixed TCP port) AppServer Broker
AIA / WSA client (random TCP port) <-------> (fixed Tomcat TCP port) AIA / WSA (random TCP port) <-------> (srvrMinPort <> srvrMaxPort TCP ports) AppServer server

Notes:
1. If the NameServer UDP port range is not set in the AIA, WSA deployed Web Service or REST Web Application properties using minNSClientPort and maxNSClientPort parameters, then all UDP ports needs to be opened.
2. When the AIA / WSA / RA does not use controlling NameServer, but connects directly to the AppServer broker port, then there is no need to open any UDP ports.
3. If the AppServer server port range is not set in the AppServer broker's properties using srvrMinPort and srvrMaxPort parameters, then all TCP ports need to be opened (valid only for StateReset and StateAware AppServer operating modes).
4. The State-reset and State-aware AppServer operating modes are not supported by the REST Adapter. When the REST Adpater is used in combination with OE Mobile, then only the State-free operating mode is supported.

Apart from the opening required ports in the firewall, in case where the firewall also does network address translation (NAT), the AppServer broker needs to register with the NameServer using the IP address, or a host name that is resolvable from the AIA / WSA side. That requires modifying the AppServer's ubroker.properties and adding the following properties in the AppServer broker section, e.g.:

[UBroker.AS.asbroker1]
registrationMode=Register-HostName
hostName=<External IP address or host name visible to AIA / WSA / RA>

Workaround

Notes

References to Other Documentation:
To verify whether a port is open or closed, a port scanner like the one provided by Microsoft can be used:
http://support.microsoft.com/kb/310099

Keyword Phrase

Last Modified Date

7/26/2016 2:03 PM

OpenEdge DeploymentOpenEdge ArchitectureOpenEdge DevelopmentOpenEdge General DiscussionsOpenEdge Pro2OpenEdge RDBMS

Drop Files

Upload FilesOr drop files

Disclaimer

The origins of the information on this site may be internal or external to Progress Software Corporation (“Progress”). Progress Software Corporation makes all reasonable efforts to verify this information. However, the information provided is for your information only. Progress Software Corporation makes no explicit or implied claims to the validity of this information.

Any sample code provided on this site is not supported under any Progress support program or service. The sample code is provided on an "AS IS" basis. Progress makes no warranties, express or implied, and disclaims all implied warranties including, without limitation, the implied warranties of merchantability or of fitness for a particular purpose. The entire risk arising out of the use or performance of the sample code is borne by the user. In no event shall Progress, its employees, or anyone else involved in the creation, production, or delivery of the code be liable for any damages whatsoever (including, without limitation, damages for loss of business profits, business interruption, loss of business information, or other pecuniary loss) arising out of the use of or inability to use the sample code, even if Progress has been advised of the possibility of such damages.

Loading

What ports need to be opened between a web server, the AIA / WSA / REST Adapter, the NameServer and the AppServer ? - Progress Community