Encapsulate ODBC traffice over HTTP???

Does anyone know if it's possible to have an external client (in the internet) make an ODBC connection to a database that is behind a firewall which only allows HTTP traffic to pass through? I guess the question is, Is is possible to encapsulate ODBC traffic over the HTTP protocol so that it can pass through the firewall?
Thanks in advance,
John Sebastian

Probably not easily, no.
If the firewall allows arbitrary traffic on port 80, you could configure the Oracle database to accept connections on that port and configure the tnsnames.ora on the client machine to use port 80. This wouldn't go through HTTP, so if the firewall is actually analyzing the traffic, you'd be out of luck, but it would work if the port is wide open. Of course, it is a terrible idea from a security perspective-- opening up databases to connections over the internet is a recipe for pain and suffering.
It is certainly possible to write an ODBC to HTTP proxy that converts an ODBC call into some sort of web service call and then write an HTTP to ODBC proxy that lives inside the firewall that translates the HTTP calls back into ODBC calls, but that is likely to be very slow. And a lot of code-- I'm not aware of any commercial utilities that do that sort of thing.
Generally, the proper way to do something like this is to use Oracle Connection Manager (or something similar that is baked in to certain firewall products) to proxy the Oracle connection through the firewall. But that requires changing the firewall setup and/or installing additional software.
Justin

Similar Messages

RV042 - Priority Routing HTTP Traffic Over WAN2?

Hi,
I have an RV042 set to load balancing. WAN1 is a T1 and WAN2 is an ADSL connection. It seems that more often than not web traffic is going out over the slower WAN1, so I'd like to try to route http traffic over the ADSL before the T1 due to the higher download speed.
Is there a way to do this?
Thanks!

blasty,
Yes it is possible. It is called protocol binding, and the configuration steps for this can be found on page 23 of this guide:
http://www.cisco.com/en/US/docs/routers/csbr/rv042/admin/guide/RV042_V10_UG_C-WEB.pdf
If you have any problems please post them in as much detail as possible.
Bill

WCCP on ASA for FTP over HTTP

Hello,
We have a WSA appliance that we have in explicit mode and want to configure as transparent. The protocols we cache and analyze with WSA are HTTP, HTTPS, native FTP and FTP over HTTP.
Is there a service number on WCCP for FTP over HTTP protocol? Or it is included within HTTP?
Thanks a lot in advance.
Best regards,
Igor

Igor,
The service number 60 (ftp-native service) only applies to transparent redirection of FTP native requests and does not apply to FTP-over-HTTP requests.
On the other hand; the Content Engine listens for redirected HTTP requests on the standard HTTP port (default port 80). To enable the Content Engine to listen for WCCP-intercepted HTTP traffic on ports other than the default port, configure the custom-web-cache service (98 and 99) or a user-defined WCCP service (services 90 to 97).
I hope this helps.
Regards,
Juan Lombana
Please rate helpful posts.

Design Choices and is LiveCycle needed? best practices for using RTMP/AMF over HTTP/XML communicatio

Hi,
I am new to flex/RIA. I am exploring different design choices especially in client server communication. On client side we will be using Flash based RIA (using Actions scripts).
There will be some simple forms (like for login, registration, payments etc) and some simple reports including with several graphs and charts. Each chart might have 1000 to 1500 data points etc. There are not video or audio content as such. On server side we have Servlets, java API and some EJBs to provide the business logic and real time prices/content (price update is usually every 10 seconds) /data. Some of the content will be static as well.
I have following questions in my mind. Is it worth it to use RTMP/AMF channels for the followings?
1. For simple forms processing (Mapping Actions scripts classes to Java classes). Like to display/retrieve/update data for/from registration forms.
a. If yes, why? Am I going to be stuck with LCDS? Is it worth it? What could be the cons for heavy usage/traffic scenarios
b. If not what are the alternates? Should I create the web services? Or only servlets are sufficient (ie. Only HTTP+Java based server side with no LCDS+RTMP+AMF)? All forms need to communicate on secure channel.
2. For pushing the real time prices/content which we may need to update every 15 seconds on user interface using graphs and charts. Can I do it with some standard J2EE/JMS way with RIA (Flex) on front-end? i.e. Flash application will keep pulling data from some topic. Data can be updated after few secs or few minutes which cant be predicted.
3. Are there any scalability issues for using RTMP? What happens if concurrent users increase 10 times within a year?
4. What are the real advantages of using RTMP/AMF instead of simple HTTP/HTTPS probably using xml based objects
5. Do I need to use LCDS if I am using AMF only on client side? Basically I mean if I am sending an object in form of xml from a servlet. Can some technology in Flash (probably AMF) in client side map it an Action script object?
6. What are the primary advantages of using LCDS in a system? Is there any alternate solutions? Can I use some standard solutions for data push technologies?
I would like that my server side implementation can be used by multiple types of clients e.g. RIA browser based, mobile based, third party software (any technology) etc.
I appreciate if you can kindly refer me to some reading materials which can help me deciding the above. If this is not the right place to post this message then please do refer me to the place where I can post such questions.
Thanks and Kind regards,
Jalal

Hi Jalal,
Let me see if I can help with some of your questions
1. Yes, you can use LCDS for simple forms processing. Any time you want to
move data between the Flex client and the server, LCDS (or its free Open
source cousin BlazeDS) is going to help. I would expect you would use the
mx:RemoteObject MXML tag to invoke server side code, passing it the form
data input by the application user.
2. If you need to push near real-time data, LCDS gives you the RTMP channel
which can scale quite nicely. You can then use the mx:Consumer MXML tag to
subscribe the clients to the messages, which can come from almost anywhere,
include JMS topics or queues.
3. RTMP (included in LCDS) is the best option for scaling to tens of
thousands of users and the LCDS servers can be clustered to proved better
scaling.
4. The AMF3 protocol used over the RTMP channels performs much faster than
simple XML over HTTP. See this blog posting for some tests:
http://www.jamesward.org/census/.
5. If you are sending a Flex application XML, then I would recommend using
the E4X API to work with the XML. This is a pretty nice and powerful way to
work with XML. If you want Actionscript objects (and probably better
performance), then using AMF serialization to Actionscript objects is the
way to go.
6. Primary advantages? There are many, but mainly you can avoid thinking
about the plumbing and concentrate on solving your application and business
logic problems.
Hope this helps you a little
Tom Jordahl
Adobe

Enabling SOAP over HTTPs on PI7.0

Hello
    We have a requirement to connect PI7.0 to PI7.1 with SOAP over HTTPS. Would you please let us know what all configuration need
       1. Setting required to be done on PI7.0 ( Communication Channels, Receiver and Sender agreements)
       2. Where to put private key and root certificate in Visual admin
       3. Port configuration for outbound and inbound traffic.
       4. Enabling of SSL on PI7.0.
       5. Any ICM related setting on PI7.0
Thanks & Regards

Hi Uttam,
Hi,
For using HTTPS protocol, you have to chose the option of HTTPS in the 'HTTP Security Level' parameter on SOAP sender communication channel.
For using HTTPS protocol, the SSL certificates need to be deployed on the server.
Below are the links for more information on SSL certificates:
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/14/ef2940cbf2195de10000000a1550b0/frameset.htm
http://www.tldp.org/HOWTO/SSL-Certificates-HOWTO/
For choosing & installing steps of SSL, refer the below links:
/people/aniket.tare/blog/2005/03/22/ssl-certificate-installation-procedure-for-sap-j2ee-engine-630-150-steps-in-visual-administrator
http://info.ssl.com/article.aspx?id=10694
-Supriya.

Best way to pass IPv4 and IPv6 traffic over a GRE Tunnel

Hello,
We have two 3825 routers with Advanced Enterprise IOS 12.4.9(T). Each of them serves many IPv4 (private and public) and IPv6 networks on their respective site.
We have created a wireless link between the two, using 4 wireless devices, with IP Addresses 10.10.2.2, 3, 4, 5 respectively (1 and 6 are the two end Ethernet interfaces on the routers).
Then we created a GRE tunnel over this link using addresses 172.16.1.1 and 2 (for the two ends) to route traffic over this link.
Now we want to route IPv6 traffic over the same link. However, we found that simply routing the IPv6 traffic over the above GRE / IP tunnel did not work.
Questions:
Is there a way we can use the same (GRE / IP) tunnel to transport both IPv4 and IPv6 traffic?
If not, can we setup two GRE tunnels over the same wireless link, that is, one GRE / IP for IPv4 traffic and a second one GRE / IPv6 for IPv6 traffic?
In brief, what is the suggested way to transport IPv4 and IPv6 traffic over the aforementioned (wireless) link?
I have read http://www.cisco.com/c/en/us/td/docs/ios/12_4/interface/configuration/guide/inb_tun.html#wp1061361 and other Internet material, however I am still confused.
Please help.
Thanks in advance,
Nick

We have set up two tunnels over the same link, one GRE / IP for the IPv4 traffic and one IPv6 / IP ("manual") for the IPv6 traffic. This setup seems to be working OK.
If there are other suggestions, please advise.
Thanks,
Nick

Streaming video over http

Hello
I need your help to understand how streaming over http works
In our company we have about 600 users who will be able to view streaming video over http hosted in Internet
We have 100 Mbps Internet link . What can we expect to happen in the network when there is contention for resources to access video on our network which delivers best effort service for video
We have enough bandwidth 4 gigs in local area network to core , so there's no real bandwidth cruch
How to differentiate or monitor bandwidth used for http streaming as against http normal traffic
Sent from Cisco Technical Support iPad App

One step closer:
Changed the crossdomain.xml file (more permissive settings).
Changed the encoding on FMLE to vp6. Working somewhat (don't know what I did to make it start streaming through hds).
But at least now I can get the individual streams in the set manifest file to work:
http://localhost/hds-live/livepkgr/_definst_/livevent/livestream1.f4m
http://localhost/hds-live/livepkgr/_definst_/livevent/livestream2.f4m
http://localhost/hds-live/livepkgr/_definst_/livevent/livestream3.f4m
BUT when I try to play the streams through the set manifest file from http://localhost/liveevent.f4m I'm getting the following error:
"The F4m document contains errors URL missing from Media tag." I'll search the forums to see if anyone else has come across this problem.
I used the f4m config tool to make the file. These are the file's contents:
<manifest xmlns="http://ns.adobe.com/f4m/2.0">
<baseURL>http://localhost/hds-live/livepkgr/_definst_/liveevent/</baseURL>
<media href="livestream1.f4m " bitrate="200"/>
<media href="livestream2.f4m " bitrate="500"/>
<media href="livestream3.f4m " bitrate="1000"/>
</manifest>
Thanks

Outlook 2010 RPC over HTTP to Exchange 2003 users remain disconnected after login

Greetings Guys,
I am unable to find a solution, Windows 2003 DC, Exchange 2003, all user were working great, RPC over HTTP, until Tuesday at about the same time perhaps before the MS update KB3002657
all remote users using outlook 2010 did not have authentication popups as was noted from this KB. But instead all login successfully, ( looking at the security logs in the exchange) , but all are remaining disconnected, immediately after login.
The users had already been configured with the registry DefConnectOpts RPC key, so I doubt their Outlook profiles are the problem.
I suspect the DC's ( we have 2 ) or the exchange have picked up an issue. I am out of ideas.
Any help would be awesome
Barry

Hi,
According to your description, I understand that Outlook(Outlook Anywhere) client display disconnected after install MS update KB3002657.
If I misunderstand your concern, please do not hesitate to let me know.
KB3002657 is a security update to prevent attacker logging on to a domain-joined system and being able to monitor network traffic. More details about this update, please refer to:
https://technet.microsoft.com/library/security/ms15-027
For your question, please try to reconfigure a Outlook profile for testing.
If it works, you can try to below steps to pop sign in page in Outlook client:
1. Open Outlook---> File and click “Account setting”, then select account name and click “Change”.
2. Click “More settings”, switch “Security” and check “Always Prompt for logon credentials”。
3. Restart Outlook to login your account.
Once this done, you can uncheck this setting for convenience.
Besides, I find an similar thread about your question, for your reference:
https://social.technet.microsoft.com/Forums/exchange/en-US/7199811f-ee41-4b81-aafe-698bdb5a0b49/recently-outlook-cannot-auth-username-and-password?forum=exchangesvrclients
Thanks
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Allen Wang
TechNet Community Support

ODBC traffic encryption/security

How can encrypted traffic be enabled/enforced on an Oracle 8i server that allows ODBC connections?
Thanks in advance for any insight!
-Tim

Oracle Advanced Security will allow/require (depending on configuration) that all traffic from any application that uses the Oracle networking layer is encrypted. Assuming your connections are using the Oracle ODBC driver (or the Microsoft ODBC driver for Oracle), if OAS is configured, the ODBC traffic will be encrypted. There are some third parties that have ODBC drivers which bypass the Oracle networking stack (i.e. DataDirect's "wire protocol" driver)-- that traffic cannot be encrypted.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Sending audio data over http problem

Hi Guys,
We are trying to create a little servlet in Tomcat, which is capable to send audio files over http to an embedded media player. The definition of the player looks like:
<OBJECT ID="Mp" CLASSID="CLSID:6BF52A52-394A-11d3-B153-00C04F79FAA6" TYPE="application/x-oleobject" WIDTH="0" HEIGHT="0">
<PARAM name="uiMode" value="none">
<PARAM NAME="ShowControls" VALUE="0">
<PARAM NAME="AutoStart" VALUE="1">
<PARAM NAME="ShowPositionControls" VALUE="0">
<PARAM NAME="ShowStatusBar" VALUE="0">
<PARAM NAME="ShowDisplay" VALUE="0">
</OBJECT>
<script language="javascript">document.Mp.URL = "here comes the url of the servlet with item ID";</script>
The servlet reads the audio file and writes its content to the response with the following http header settings:
getResponse().setContentType("audio/x-wav");
getResponse().setHeader("Content-Transfer-Encoding", "binary");
getResponse().setHeader("Pragma", "Public");
getResponse().setHeader("Cache-Control", "must-revalidate, post-check=0, pre-check=0");
getResponse().setHeader("Content-Disposition", "inline; filename=Media.wav");
getResponse().setHeader("Content-Length", new Integer(MediaBytes.length).toString());
getResponse().setHeader("Accept-Ranges", "bytes");
So, everything works fine for wav files in Internet Explorer, but we are facing problems with Firefox, where it does not work. The embedded Media Player says that "Windows Media Player cannot play the file. One or more codecs required to play the file could not be found."
But if we set the url to directly to the file on the server, everything works fine.
We have analyzed the HTTP traffic in both situation, but we cannot understand how Internet Explorer/Firefox and Media Player works together:
- how does Media Player know that the audio file is playable?
- if the url points directly to the file, the HTTP headers does not contain any kind of information about the file type, only the extension is available; Media Player checks the file extenion in the url?
- if the url points to the servlet, why Media Player in Firefox cannot determine the file type and throws error?
Any help is greately appreciated!
Thanks!
Gabor

If you haven't already, I would try breaking down the problem. First confirm you're getting serial data then confirm that netcat can send some data. Like this:
xxd < /dev/tty.usbmodemfa121 | less
nc -u 10.0.1.3 7000 <<< 'hello over there'

Redirecting all HTTP traffic to HTTPS that will reverse proxy specific URI

-- Requirement --
I have a Sun web server 6.1 SP4 that sits in a DMZ that must securely reverse proxy traffic to an internal application server listening on 443.
The web server instance has two listen sockets, 80 and 443.
The web server instance must accept traffic on port 80 but re-direct it to 443 so all subsequent traffic with the client happens over HTTPS.
HTTPS traffic for "www.mydomain.com/myapp/" must be reverse proxied to the internal app server, "https://myapp.mydomain.com/myapp/".
-- Current set-up --
The server reverse proxies both HTTP and HTTPS traffic with the indicated URI.
How can I constrain the reverse proxying to HTTPS traffic?
Thanks for your help,
Jez

Thanks Chris that worked perfectly.
Aside
Before your solution I had (unsuccessfully) tried the following obj.conf directive
<Client security="false">
NameTrans fn="redirect" from="/" url-prefix="https://www.mydomain.com/"
</Client>However, it didn't work - is it not possible to use the <Client security="false"> in this manner?

Stop SSH over HTTPS ?

Hi guys,
I have Cisco ASA-SSM-20 deployed INLINE.
I can cut any traffic without any problems except SSHv2 over HTTP or HTTPS.
Implementation ? - http://dag.wieers.com/howto/ssh-http-tunneling/
Easy, you can make an HTTPS tunnel, then SSH over HTTPS and after that LOCAL PORT FORWARDING so you can get in the company from home ;)
How I can deny souch connection ?? Any signature ? Any ideas or Cisco can't help in this case.
Best regards,
CD

Interesting. In the very first data packet, I see:
000-1.99-0000000_3.9p1
000-2.0-0000000_3.9p1
I expect to see something like:
SSH-2.0-SecureCRT_5.1.3 (build 281) SecureCRT
SSH-1.99-OpenSSH_3.9p1
In the above session, I was using SecureCRT and connecting to an OpenSSH server.
In your case, whatever client and server is being used appears to replace any references to SSH and the server type with zeroes...perhaps intentionally to bypass IDS/IPS? or actually, it might be a pretty clever hack to prevent others from connecting to your SSH server because I think a standard SSH client will fail to connect if versions don't match. I'll have to test that.
In any event, look at the first data packet after the handshake and modify/build a signature based on it. You might consider a meta signature to prevent false positives. bear in mind that someone capable of changing the source and recompiling both the server and the client can set this to whatever they want:
perhaps look for "diffie-hellman" in one signature and "ssh" in another?

SOAP over HTTP

I want to send XML in SOAP envelop over HTTP to Web Service. I want to used HttpUrlConnection instead of other approaches. I have set doInput and doOutput both as true as want both type of communicaiton from one HttpUrlConnection.
I am able to get OutputStream from HttpUrlConnection but getting error 500 while trying to get InputStream.
Any idea ... ?

Its a question abt SOAP.I'm new to SOAP.As SOAP itself
is a protocol (Simple obj access protocol) SOAP is no longer an acronym - I believe this was done so people's understanding of SOAP was not limited to SOAP-RPC.
why is HTTP used to transfer data using SOAP?SOAP is an XML messaging standard. It provides a standard method for exchanging XML data in a fashion that is transport agnostic, i.e. it would be perfectly valid (though slow) to use email as the transport for SOAP messages.
HTTP is used because it is simple, widely implemented across platforms and languages, and is also commonly available. A side effect of the use of HTTP is that many servers allow HTTP traffic through their firewalls, enabling SOAP applications to be available over a wider network (this is not the greatest from a security perspective).
In short, HTTP is used because it's there.
JT

How can i use an existing vpn connection without using the option "Send all traffic over vpn connection"?

I have been trying to get my computer (os x.7) to astablish a remote desktop connection to my work computer via a vpn tunnel. In fact I have just discovered that it works fine if i select to "send all traffic over vpn connection" from the options in the advanced setup of the vpn.
If the option is selected microsofts "Remote desktop connection for mac" works just fine. However without selecting the option it is not taking advantage of the tunnel but tries to connect as if the tunnel would not exist.
Now the question is how do I get program to use the vpn tunnel without checking the above option?
Thanks for any hints and pointers.

Then can her computer be authorized to both accounts?
Absolutely. You can authorize any given computer to up to five iTunes Store accounts.
If purchases are made on her account, to a computer authorized to my account, can I put those songs on my iPod?
If you connect your iPod to her computer, yes. Tracks download only to the computer from which they're purchased, regardless of which iTunes Store account is used for the purchase. Or you could copy the tracks from her computer to yours and then authorize your computer to her iTunes Store account. But that's sort of defeating the original purpose, it would seem to me.
is it better to buy music through Amazon downloads and/or actually purchasing CDs to avoid the security features iTunes puts on its music?
That's certainly an option. If it's an entire album I want, I buy CDs. That way I can import them at the quality I want and to whichever of my systems I want. Amazon or one of the other download stores that offer tracks as MP3 are also an option, though for me download stores are best when you just want a couple of tracks off a given CD.

Is it possible to call API over http(not on ssl) from inside a secure page which is on HTTPS

Hi Guys
We are running a httplistner on localhost exposing http based end point. can we call this url from a website which is exposed over https when it opens from the same machine.
Note: the site is being opened in browser is using HTTPS and is on SSL.
if possible can some one please help.
regards
Mukesh V

hjuarez wrote:
Please re-read my first post. I think it is clear.I disagree.
I want to import a dll It is not clear if you are aware that .dll files are a windows thing.
but I have to run the java code on a solaris box
in order to use its methods in java, It is not clear if you are aware using .dll files in a Solaris environment has nothing to do with Java.
My question was if there is a solution -or not- that faces this kind of issues.It is not clear if you are talking about Sun Solaris or x86 Solaris.
I don't know if it makes any difference, but it might.
Maybe your question is: why this guy wants to do something like this?No. I am not concerned with that.
Just trying to help you ask the right questions.
And maybe you will find the answers yourself once you have the right questions.
I'm integrating some biometric solutions on Sun Access Manager. But the biometrics vendor only provides windows ocx's and DLL's. And Access Manager is running in a Solaris box.
I want to know if I can do something by myself or just tell the biometrics vendor that they must provide a Java solution.
I have been trying to find something on the web, but I asked this forum because maybe someone has tried to do something similar.The suggestion by jschell is probably your most promising option.
Integrating the .dll files with Java on a Windows box
and communicating between Access Manager / Java on the Solaris box and your Java code on the Windows box
(possibly using RMI).

Encapsulate ODBC traffice over HTTP???

Similar Messages

Maybe you are looking for