DMZ pattern with single HTTP server and OC4J separated

I am new to Oracle products and I am I trying to configure 9iAS Rel 2 for a JSP/servlet project and would greatly appreciate any comments or pointers to specific documents that may be helpful.
I would like to use the DMZ pattern for a small application without clustering anything or installing Infrastructure. I would like to have just the HTTP server between the two firewalls and have the application server (hosting the business logic) and the database server (9i Rel 2) behind the second firewall. I want to keep this as simple as possible.
Is there any way to install just an HTTP server (such as Apache) in between the two firewalls and have it direct requests to the Oracle 9i (Rel 2) application server (J2EE & Web cache installation) behind the second firewall?
If that is not possible (due to the need for Oracle's HTTP server and mod_OC4J to forward requests), then I would assume that I would have to install a copy of 9iAS on the one machine between the two firewalls (so that I would have the Oracle HTTP server with mod_OC4J) and then install another copy on a machine behind the second firewall (to host the business logic). Is this correct?
With those installations in place, would I then follow the modifications that are mentioned in "Scenario C: Routing (or clustering) Instances Across Firewalls" of the 'Oracle9i Application Server: mod_oc4j Technical Overview' (i.e modify the following files opmn.xml, ons.conf mod_oc4j.conf) so that the 9iAS in between the two firewalls ignores its OC4J and forwards requests the to 9iAS behind the second firewall? (I know that this document is talking about clustering which is what I do not want to do, but I can't find any information about trying to put a single instance of a HTTP server in the DMZ while having a single instance of OC4J behind the second firewall).
Would a better approach be to install a copy of 9iAS in the DMZ and then install a stand along copy of OC4J behind the second firewall?
Does mod_oc4j automatically install with the J2EE and Web cache installation of 9iAS Rel 2?
Thanks for your insights,
- David

You'r on the right track. You can't install just OHS or just OC4J seperatly but you can get the end result you are looking for.
Install an iAS instance (j2ee&webcache) in the DMZ and shutdown all but the OHS process.
Instanll a second iAS instance behind your firewall an shut down all but the OC4J process.
you now have effectively what you want OHS in the DMZ and OC4J at the intranet.
Now if you follow the directions in the Mod_oc4j overview doc. You modify the ons.conf by using the dcmctl commands
getopmnport/addopmnlink
Then you modify the mod_oc4j.conf using the instance:// tag to rouet requests from the OHS in the DMZ to the OC4J's
in the intranet.
You will need to open ports in the firewall for the ajp traffic between OHS and the OC4J's

Similar Messages

10g: HTTP Server and OC4J on different servers?

Can anyone assist with configuring HTTP Server and OC4J on different servers?
I installed AS 10g on both; our application runs fine on one server, with the HTTP Server and OC4J both on the same box.
I need to also test this with the HTTP Server on a separate box.
I added this to mod_ocj4.conf:
Oc4jMount /indox-qa1
instance://cvodev2:oas_dev2.cvodev2.int.sys.com:indox-qa1
Oc4jMount /indox-qa1/*
instance://cvodev2:oas_dev2.cvodev2.int.sys.com:indox-qa1
But when I try to access something like http://cvodev4/indox-qa1 I get this in the logs:
[Wed Jul 06 16:54:10 2005] [warn] [client 10.1.1.231] [ecid: 1120683250:192.152.136.127:1248:1544:1,0] MOD_OC4J_0184: Failed to find an oc4j process for destination: instance://cvodev2.int.camsys.com:oas_dev2.cvodev2.int.camsys.com:indor-qa1
[Wed Jul 06 16:54:10 2005] [error] [client 10.1.1.231] [ecid: 1120683250:192.152.136.127:1248:1544:1,0] MOD_OC4J_0145: There is no oc4j process (for destination: instance://cvodev2.int.camsys.com:oas_dev2.cvodev2.int.camsys.com:indor-qa1) available to service request.
[Wed Jul 06 16:54:10 2005] [error] [client 10.1.1.231] [ecid: 1120683250:192.152.136.127:1248:1544:1,0] MOD_OC4J_0119: Failed to get an oc4j process for destination: instance://cvodev2.int.camsys.com:oas_dev2.cvodev2.int.camsys.com:indor-qa1
[Wed Jul 06 16:54:10 2005] [error] [client 10.1.1.231] [ecid: 1120683250:192.152.136.127:1248:1544:1,0] MOD_OC4J_0013: Failed to call destination: instance://cvodev2.int.camsys.com:oas_dev2.cvodev2.int.camsys.com:indor-qa1's service() to service the request.
I did some ethernet sniffing and it doesn't look to me like the OHS box is even trying to contact the OC4J box.
Is there more configuration I need to do beyond this?
Thanks,
dwh

hi user11159690
Maybe this can help:
"Oracle® HTTP Server Administrator's Guide 10g Release 3 (10.1.3) B25211-02"
"7.32 mod_oc4j"
http://download.oracle.com/docs/cd/B25221_04/web.1013/b25211/confmods.htm#i1025739
Maybe more specifically "Oc4jMount":
http://download.oracle.com/docs/cd/B25221_04/web.1013/b25211/confmods.htm#CIHJBGFB
(tip : You can use "Your Control Panel" to make your name visible in forum posts.)
success
Jan Vervecken

How to configure Apex 3.2 in Oracle11gr2 RAC eniv with single http server

Hi All,
1. How to connect Apex 3.2 in oracle11gr2 RAC enironment for the single http server. We dont have any load balancing server here. I Mean to say that I need connect the two nodes from the single http(dad.conf) server.
Is it possible to connect single node database PlsqlDatabaseConnectString with TNSFormat in http dad.conf file
Thanks,
Rj
Edited by: pnr on 5 Sep, 2012 12:54 AM

It is not clear what you want. But yes thats possible. I think the RAC or DB general forum would be better suited. Since it might depend upon how your listener configuration is set up.
Apex (OHS or Apex Listener) is just like any other client in this regard. You can set it up to connect to both rac nodes (load balancing style) or you could set it up to connect to one dedicated apex rac node.

Internal server error - Http server and OC4J intance

Hi
Internal Server error ( GET/<app name>
Hi,
We are using AS10g R1: 9.0.4.0.0 in production and occasionally getting Internal Server Error. And to overcome this problem, everytime we have to restart the HTTP server; we tried re-staring the OC4J instance to find out whether OC4j is causing the problem, however it doesn't work until we restart the Http server. Interestingly Http server serves well other OC4j instances during the error for a particular app runing in different OC4J instance.
ANY HELP WILL BE HIGHLY APPRECIATED.
Here are more details:
It's a J2ee (struts) app.
Operating System: Sun Solaris- 5.10
Http server access log msg:
"GET /<app name> HTTP/1.1" 500 544
Http server error log msg:
MOD_OC4J_0184: Failed to find an oc4j process for destination: OC4J_1
[Mon Sep 8 17:55:13 2008|http://forums.oracle.com/forums/] error MOD_OC4J_0145: There is no oc4j process (for destination: OC4J_1) available to service request.
[Mon Sep 8 17:55:13 2008|http://forums.oracle.com/forums/] error [ecid: 51865290138,1|http://forums.oracle.com/forums/] MOD_OC4J_0119: Failed to get an oc4j process for destination: OC4J_1
[Mon Sep 8 17:55:13 2008|http://forums.oracle.com/forums/] error [ecid: 51865290138,1|http://forums.oracle.com/forums/] MOD_OC4J_0013: Failed to call destination: OC4J_1's service() to service the request.
[Mon Sep 8 17:55:15 2008|http://forums.oracle.com/forums/] warn [ecid: 51865292545,1|http://forums.oracle.com/forums/] MOD_OC4J_0184: Failed to find an oc4j process for destination: OC4J_1
OC4J Log:
Nothing unusual; looks good
Mod_oc4j.conf
LoadModule oc4j_module libexec/mod_oc4j.so
Oc4jConnTimeout 300
Oc4jCacheSize 0
# in response to eSecure findings
RewriteEngine on
RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)
RewriteRule .* - [F]
Work around:
Re-starting HTTP server

Greetings,
Since we see a 500 error below in the Http server access log msg: the server is unavailable. I suggest changing the OC4J logging to "FINEST" and then run your test again (server reset etc.) and post the log here.
THX
-Mike

Lync Enterprise with Single BE Server and Voice Routing

Hi team,
I read that the best way for a HA topology is to go ahead with 3 FE server pool(Although MS has said it's workable, many recommend not to). Now this leaves me with another problem, can I go ahead with just 1 SQL Back-End server. I know in this case SQL will
have no failover. But if we ok with the downtime, will it work properly when the BE is up?
The front-end includes the following:
Basic Lync functions
Mediation
Monitoring
Archiving
Thank you.
Chris!

Hi Crypto_J,
After the Back End Server is up, you could verify if the services of Lync Servers are normally started, and take a test.
For more details about restoring the Back End Server, please click on the link below.
Restoring the server hosting the Central Management store in Lync Server 2013
http://technet.microsoft.com/en-us/library/hh202172.aspx
To ensure high availability for your Back End Servers, you can use either synchronous SQL mirroring or SQL clustering.
Using one of these solutions optional, but is recommended to maintain your organization's business continuity.
Best regards,
Eric

Front-end HTTP Server and Performance with .jspx pages?

This is more of a general question that I'm looking for validation:
If the majority of our website is implemented as .jspx pages, with very few straight HTML pages, is there benefit in deploying to an environment with a separate HTTP front-end web server and back-end Application server (java container)? For example, I'm deploying to Tomcat as both the HTTP server and Java Application server for the .jspx pages; is there a performance advantage in deploying to an Apache HTTP server with a connector to Tomcat if I'm primarily serving up .jspx pages? I'm not as familiar with Oracle AS architecture, so my question is primarily around Tomcat deployment.
thanks

This is more of a general question that I'm looking for validation:
If the majority of our website is implemented as .jspx pages, with very few straight HTML pages, is there benefit in deploying to an environment with a separate HTTP front-end web server and back-end Application server (java container)? For example, I'm deploying to Tomcat as both the HTTP server and Java Application server for the .jspx pages; is there a performance advantage in deploying to an Apache HTTP server with a connector to Tomcat if I'm primarily serving up .jspx pages? I'm not as familiar with Oracle AS architecture, so my question is primarily around Tomcat deployment.
thanks

Question about HTTP Server and 9iAS

I am kind of new to Oracles 9is products. I installed Oracle 9i Rel. 2 recently and it installed HTTP Server and other stuff as part of that install. I am trying to write a small web application. Is this install good enough to do basic servlet's, jsp's and may be EJB's etc ... or do I need to install 9iAS. I am confused on the fact that I know 9iAS will give me j2ee container, web container, clustering, etc ..., what functionality is included in the 9i databases web server piece.
Also, can anyone point me to a good documentation that explains directory structure of 9i Rel. 2. I am familiar with the database part fairly well(oracle 7 release). However, I am confused as to new web related stuff (Apache, bc4j, etc..) in 9i Rel. 2.
Thanks.

Hi,
No, you cannot run EJB's in the Apache installation. For that you might want to download OC4J.
Basic Http pages and Servlets can run but I dont think it is advisable to use it for that. For any kind of development, I would suggest you to use OC4J.
Oracle9i Database is web enabled and you can access the table, etc.. from a browser too. This is the reason Apache is provided with the basic installation. Oracle9i Rel 2 has XML DB in it which again can be accessed from the Web.
For more help on any of these check http://otn.oracle.com/documentation/oracle9i.html
You will be able to get all the related Developer's Guide here.
Hope this helps,
Rajat

How to isolate web applications at URL level with Oracle HTTP Server?

We have 2 machines each for oracle web cache, oracle http server and oracle application server (oc4j). We would like to host many web applications on this infrastructure. We have an issue with application/web site isolation for maintenance purposes.
We have several oc4j containers for different web sites/applications but they all use one instance of Oracle Http Server. When we need to make changes to an application/web site or introduce a new web site (URL), we change the OHS configuration and restart OHS on each of the machines.
As we have many URLs hosted on this OHS and plan to host a lot more (may be around 300), we need a way to slice and dice the URLs so that every change or any change should not need to go through a regression cycle or testing cycle for all the applications each weekend (our change window). When we used Apache earlier, we used to be able to create multiple httpd.conf (process level isolation) to cater to different applications.
We could do this with Oracle Http Server too but Oracle will not support us. I appreciate any advice or suggestion with this issue.
Thank you
Ramana

Hi Joey,
A great idea! I recently presented at a local user group meeting about my WebSockets API (see the links in my signature). I've uploaded the presentation and the demo code I gave to our UG here.
I think the barrier to entry is with needing to know the web languages (e.g. html/css/js) as well as writing your LabVIEW code. I have joined the group and look forward to seeing some interesting content on there! Certainly some demos of using AJAX to make requests to Web Services and do something with the data (e.g. display on a graph) would be a good place to start.
Certified LabVIEW Architect, Certified TestStand Developer
NI Days (and A&DF): 2010, 2011, 2013, 2014
NI Week: 2012, 2014
Knowledgeable in all things Giant Tetris and WebSockets

Installing Apex 4 on Oracle 11.2.0.3 with Oracle HTTP Server on WINDOWS

Has someone put together a cookbook on installing the above? I have tried following the documentation; but it is in dire need of updating. I have become quite confused as to how to piece together alll of the parts. Seemed much easier in 10.2...
TIA!

Vorlon1 wrote:
Has someone put together a cookbook on installing the above? I have tried following the documentation; but it is in dire need of updating. I have become quite confused as to how to piece together alll of the parts. Seemed much easier in 10.2...
TIA!After a database re-install on my Windows 7 laptop 2 months ago I tried to install the HTTP server but had trouble getting it to work. After a day or two I gave up and used the EPG which works with some performance issues - pages can take many seconds to render. I think there is a conflict between the EPG and security software on the laptop but have not been able to pin down the exact problem. Anyway, the EPG is not an option for you and even Oracle does not reccommend it for production implementations. The EPG is okay for quick-and-dirty R & D but real implentation should have something better. I prefer the EPG on my laptop because the Apex listener required an extra window to be open that I was likely to close by mistake (my error yes. Reality is sometimes stupid).
I have had several sucessful installs on older versions of Apex on Oracle 9 and 10 on Windows XP using the HTTP server but always struggle with the configuration; getting the settings in the .conf file (whatever it is called now) correct remains difficult (at least for me). I keep installation notes on problems encountered and their solutions. Typical issues I encounter are
1. Incorrect configuration file settings
2. Improper loading of images
3. Missing installation steps (unlocking ANONYMOUS, for instance, or not updating the PL/SQL version).
4. Make sure the correct URL is being used
5. When using the HTTP Server making sure it is running by using its URL is very heplful
Follow the installation instructions for your platform and listener. If something does not work first review the installtion instructions very carefully, then perform web searches for answers to the problem. Except for last time when I lost patience with the HTTP server the installations have always worked.
I also find Windows 7 painful - the added security prevents me from editing needed files without jumping through hoops. I don't even want to think about Windows 8 ...

Having trouble with the HTTP Server vi

I'm having trouble using the HTTP Server program to view the front panel of my program remotely.
When I initially start the server program everything works fine. However, the program hasn't been able to run for more than one or two days at a time before it freezes and won't display the front panel.
The only clue I can see as to what is going on is that there are always several pending connections and active connections listed in the HTTP Server front panel when it isn't working properly. Stopping the server and starting it again fixes the problem temporarily and it works fine for another day or two.
Any ideas about what might be causing this problem?

Which OS do you have? Win95 and 98 are not very stable systems, so you might want to try with WinNT. You should be able to run the HTTP server for few days on WinNT.
Since restarting the server solves the problem, maybe you can try to programmatically restart the server every 24 hours. This can be done within LabVIEW with the HTTP Server Control.vi. Be aware that this will close all the connections, not just the pending ones.
Does this problem happen every couple of days, or are you able to run it sometimes for a longer period time? Is it related to how many clients request control?
Also, take a look at the Access Log, and see if you notice anything strange at the time when the problem happens.
I hope this helps.
Have a pleasant day.
Zvezdana S.
Nat
ional Instruments

Splitting HTTP Server and 9IAS

Whats the advantage of splitting the HTTP Server and application server. Bcos in our case the web server is installed thro a minimal installation and the Application server is installed using the enterprise edition in separate servers. Hence in both the servers the HTTP service is enabled . Also the Jserver of web server is not being used by us.
It would be helpful if somebody could list out the various advantages / disadvantages with the above architecture.
Thanks and Regards
Swaminathan

Question is probably best answered on the general 9iAS forum:
http://forums.oracle.com/forums/forum.jsp?id=466592
A quick answer: Reasons vary from distributing load (HTTP hits or application execute), using distribution of HTTP servers for high availability via new clustering capabilities in 9iAS, using different size boxes for one piece or another (e.g. big cluster of tiny HTTP servers and a smaller number of larger servers for EJB), utilizing hardware, physically and logically splitting apart functionality of 9iAS (not such an issue with just the core but more significant with Forms, Reports, Portal, etc).
This paper gives the feature set supporting distributed deployment:
http://otn.oracle.com/products/ias/ohs/collateral/r2/clusters.pdf
and this paper:
http://otn.oracle.com/products/ias/ohs/collateral/r2/bp-core-v2.PDF
gives best HTTP and deployment practices that might answer your question.
Mike.

Working with IBM HTTP Server 2.0.47.Planning to upgrade.

Hi,
My webgate is configured with IBM HTTP Server 2.0.47 and now i would like to upgrade the Server and add a new webgate to it.
Now i am planning to upgrade to a higher version of IBM HTTP Server.
But i am not able to find any version of IBM HTTP Server compatible with Apache 2.2.0
So can anyone help me in this.
Is IBM HTTP Server 6.1 equivalent to Apache 2.2.0

Hi,
You'll have to compile yourself for different PHP API versions.
Regards,
George

Unable to connect hana with sybase replication server and i am not getting ECH plz help

unable to connect hana with sybase replication server and i am not getting ECH plz help

Please don't necrobump/hijack threads: https://wiki.archlinux.org/index.php/Fo … bumping.22
https://wiki.archlinux.org/index.php/Fo … _hijacking
Closing

Does Mountain Lion come with an Apache server and if so how do I access it?

Does Mountain Lion come with an Apache server and if so how do I access it?
On my previous Mac there was a check box for web sharing in the Sharing System Preferences. I used this to experiment with HTML website design. How do I do this on my new Mac?

Thanks for the reply. Others have asked similar questions. I was directed to a user tip page
by etresoftThat gives step by step instructions which should solve my problem.

What is available on new Windows servers that allow you to write scripts that can work directly with Windows, SQL Server, and Exchange Server?

What is available on new Windows servers that allow you to write scripts that can work directly with Windows, SQL Server, and Exchange Server?
a. PowerShell
b. isql
c. osql
d. sqlcmd

All questions seem to be from the interview or a test. I think I even took this test once, it's KForce test.
For every expert, there is an equal and opposite expert. - Becker's Law
My blog
My TechNet articles

DMZ pattern with single HTTP server and OC4J separated

Similar Messages

Maybe you are looking for