Firewall configuration between clusters

Question

          We are planning our web infrastructure as follows:
          internet ----> firewall(1)+HD loadbalancer -----> Weblogic
          cluster (servlet/JSP) ----> firewall (2) ----> Weblogic
          cluster (EJBs)
          The reason we want to put a firewall between servlet clsuter
          and EJB cluster is that anything goes wrong in the front
          presentation cluster, our mission critical business cluster
          is not to be touched.
          Now, what are the requirement for the configuration of firewall
          2. I have the following question in mind:
          1:) I seem to remember reading on the document that we must
          bind the DNS name to the naming lookup directory, TRUE?
          2:) As this is a pure JAVA environment, I assume the communiation
          between servlet and EJBs will occcur through RMI. Does
          Weblogic use a specific port to listen to RMI request on
          server side (EJB cluster)? If so, how do I find out what
          it is?
          3:) Is it sufficient enough to just allow the above mentioned
          port open in my firewall 2 to enable the Serlvet/EJB
          connection?
          What if I have multiple Servlets talking to multiple EJBs
          at the same time? Do all these communication go through
          the same port?
          Thanks
          

Answer 1

Danny,
          > 1:) I seem to remember reading on the document that we must
          > bind the DNS name to the naming lookup directory, TRUE?
          In the document it spends 90% of the time talking about DNS. Needless to
          say, you typically don't have to make any DNS settings at all.
          > 2:) As this is a pure JAVA environment, I assume the communiation
          > between servlet and EJBs will occcur through RMI. Does
          > Weblogic use a specific port to listen to RMI request on
          > server side (EJB cluster)? If so, how do I find out what
          > it is?
          If I understand correctly, Weblogic often uses RMI over T3 (their own RMI
          implemetation). That would use 7001 by default.
          > 3:) Is it sufficient enough to just allow the above mentioned
          > port open in my firewall 2 to enable the Serlvet/EJB
          > connection?
          Yes.
          Just remember, if your servlets can get through the firewall to your ejb
          servers, then so can anything else that gets there.
          Cameron Purdy
          Tangosol, Inc.
          http://www.tangosol.com
          +1.617.623.5782
          WebLogic Consulting Available
          "Danny" <[email protected]> wrote in message
          news:[email protected]...
          >
          > We are planning our web infrastructure as follows:
          >
          > internet ----> firewall(1)+HD loadbalancer -----> Weblogic
          > cluster (servlet/JSP) ----> firewall (2) ----> Weblogic
          > cluster (EJBs)
          >
          > The reason we want to put a firewall between servlet clsuter
          > and EJB cluster is that anything goes wrong in the front
          > presentation cluster, our mission critical business cluster
          > is not to be touched.
          >
          > Now, what are the requirement for the configuration of firewall
          > 2. I have the following question in mind:
          >
          > 1:) I seem to remember reading on the document that we must
          > bind the DNS name to the naming lookup directory, TRUE?
          >
          > 2:) As this is a pure JAVA environment, I assume the communiation
          > between servlet and EJBs will occcur through RMI. Does
          > Weblogic use a specific port to listen to RMI request on
          > server side (EJB cluster)? If so, how do I find out what
          > it is?
          >
          > 3:) Is it sufficient enough to just allow the above mentioned
          > port open in my firewall 2 to enable the Serlvet/EJB
          > connection?
          >
          > What if I have multiple Servlets talking to multiple EJBs
          > at the same time? Do all these communication go through
          > the same port?
          >
          > Thanks