How would a corporation deploy Sun ONE Web Proxy Server?

A corporation should deploy Sun ONE Web Proxy Server at the following key places:
* The Internet gateway: Sun ONE Web Proxy Server deployed just behind the firewall facilitates access to the Internet and reduces response times and communications expense.
* Major sub-network connections: Marketing, Sales, Product Development, Human Resources, and Finance departments might have their own subnetworks. An Sun ONE Web Proxy Server deployed at each subnet can reduce traffic on the corporate backbone.
* Remote offices that are disconnected from the internal network: Sun ONE Web Proxy Server can provide a quick mechanism for replicating content when necessary, providing better company integration and increasing network performance without large capital and communications expense.
* Internationally: Outside the United States, communications bandwidth is typically much more expensive, making Sun ONE Web Proxy Servers even more cost effective. Every international office can make use of an Sun ONE Web Proxy Server.
* Outside the firewall as a Web server substitute in reverse proxy configuration: This protects information on the secure Web server behind the firewall and offers load balancing via caching.

http://wwws.sun.com/software/download/products/3ef1fcb5.html
If u wait for a week or so, SP4 will also be there.
Maneesh

Similar Messages

Why doesn't Sun ONE Web Proxy Server support full replication?

Sun believes caching on-demand is a much more appropriate model for either the World Wide Web or an intranet. Common indexes should be distributed, but data can (and should) be stored wherever is most appropriate on the network. If Proxy Servers are deployed, there will be a 50 percent to 75 percent chance that the document will be cached locally and no chance of getting stale data.
Sun ONE Web Proxy Server uses sophisticated statistical analysis to store the documents most likely to be needed. It also manages document expiry and version control, and by default checks the home server every time a document is requested. Full replication like that performed by other softwares presumes that each document needs to be fully replicated on every server. (Imagine doing that on the Web!) This model limits the scalability of the infrastructure, and requires many more servers, more hardware, and more management complexity. More importantly, it increases the likelihood of getting stale data. A document checked in at one location may take a day or more to be fully replicated around the world.

If you have a support contract, get in touch with a support engineer. We've run into a bug related to following referrals in the "off-the-shelf" version of the proxy server. I believe there is a hotfix that solves the issue.

Does Sun ONE Web Proxy Server have built-in log analysis tools? What kind o

Sun ONE Web Proxy Server automatically logs all requests using either the common log-file format or an extended log-file format. The extended log-file format includes the referrer field and user agent. You can also create your own log file format by selecting which HTTP fields you would like to log. A built-in log analysis program includes reports such as total number of requests, total bytes transfered, most commmon URLs requested, most common IP addresses making requests, performance during peak periods, cache hit rates, and estimated response time reduction. The items logged and the analysis program are completely configurable using the server manager's HTML form.

Sun Java System Web Server is a web server; it serves web pages to web clients. Sun Java System Web Proxy Server, on the other hand, is a web proxy server; it routes requests/responses between web servers and web clients.
You can configure Web Server to act as a simple reverse proxy by installing the Web Server 6.1 Reverse Proxy Plugin. This doesn't provide any of the forward proxy or caching proxy functionality found in Web Proxy Server.
Both Web Server 6.1 and Web Proxy Server 4.0 are supported on Solaris 10.

IPlanet Sun ONE Web Proxy Server 3.6 SP6 terminating

I have a problem with my proxy server server.
I use iPlanet Sun ONE Web Proxy Server 3.6 SP6
It is terminating and the service is restarting. This happens about 10-15 times a day. The message I get from the log is :
[22/Mar/2005:09:29:30] info: server terminating... each time it terminates.
I know for sure that this is no hardware issue (as I have changed the hard disk recently). My OS is win2000 server SP4 + all released patches from MS.
Also I have reinstalled the OS several times (clean install after format) and I got the same result.
Also I tried to use the proxy with/without LDAP server for authentication - the same.
Any suggestions/recommendations are mostly welcome.
Thanks in advance,
Kaloyan

Dear Kaloyan,
Migration to another proxy (e.g. ISA) seems to be quickest solution for your problem, as WebProxy doesn't work well on w2k platform.
Vladimir
P.S. Regards to Delyan :)

Can i setup a secure reverse proxy using sun one web proxy server and windows 2000?

I've tried this on IPlanet Proxy 3.6 and, after reading the documentation, realized that SSL is not supported on the Windows platform. So I'm asking if it is supported using Sun One Web Proxy Server

Hi,
Yes, What you say is right.
"The NT and Windows 2000 versions of iPlanet Web Proxy Server 3.6 do not support SSL".
Sun One Web Proxy Server is as same as iPlanet webproxy server.
May be in future relase of proxy server SSL will be supported in Win2000.
Regards,
Dakshin.
Developer Technical Support
Sun Microsystems
http://www.sun.com/developers/support.

Sun Java Web Proxy Server Routing to another Proxy Server

hello every body
i have installed Sun java web proxy server and we are get internet services from anotyher proxy server.
how route SOCKS (Ports) to another proxy server)
I mean 8080 web browsing is ok but my socks applicaiton like outlook is not working. how to Route my Sun Java Web proxy Server Socks Server to another Proxy Server.
Please reply
best regards
Aamir Mughal
[email protected]

Dear ahmad@bzu,
I suspect that your download is corrupted. Check the file size ( for me it shows up 89,328KB(and the installation went smooth). So a possible solution should be to download again and try the installation.

Issue with Sun Java Web Proxy Server

I am using Sun Java Web Proxy Server to test my webservice in https mode.(SSL mode).When i test the webservice in http mode,its working fine,but when I test it in SSL mode ,it is giving the following error:
Unable to tunnel through localhost:8082. Proxy returns "HTTP/1.1 403 Proxy denies fulfilling the request"
When I am requesting the webservice using the following parameters:
a)-Dcom.yodlee.soap.services.url=https://localhost:1080/yodsoap/services
b)-Dyodlee.sdk.https.proxyHost=localhost
c)-Dyodlee.sdk.https.proxyPort=8082
d)-Dcom.yodlee.soap.client.http11Enabled=1
this parameters is used to set the client http connection to HTTP1.1 by setting the HTTP_TRANSPORT_VERSION.
Detailed error message is as follows:
Caused by: java.io.IOException: Unable to tunnel through localhost:8082. Proxy returns "HTTP/1.1 403 Proxy denies fulfilling the request"
     at org.apache.axis.AxisFault.makeFault(AxisFault.java:129)
     at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:131)
     at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:71)
     at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:150)
     at org.apache.axis.SimpleChain.invoke(SimpleChain.java:120)
     at org.apache.axis.client.AxisClient.invoke(AxisClient.java:180)
     at org.apache.axis.client.Call.invokeEngine(Call.java:2492)
     at org.apache.axis.client.Call.invoke(Call.java:2481)
     at org.apache.axis.client.Call.invoke(Call.java:2176)
     at org.apache.axis.client.Call.invoke(Call.java:2099)
     at org.apache.axis.client.Call.invoke(Call.java:1622)
     at com.yodlee.soap.core.login.CobrandLoginSoapBindingStub.loginCobrand(CobrandLoginSoapBindingStub.java:225)
     at com.yodlee.soap.core.login.CobrandLoginSoapClientProxy.loginCobrand(CobrandLoginSoapClientProxy.java:119)
     ... 1 more
Caused by: java.io.IOException: Unable to tunnel through localhost:8082. Proxy returns "HTTP/1.1 403 Proxy denies fulfilling the request"
     at org.apache.axis.components.net.JSSESocketFactory.create(JSSESocketFactory.java:197)
     at org.apache.axis.transport.http.HTTPSender.getSocket(HTTPSender.java:157)
     at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:114)
     ... 12 more
This error message shows that its not able to get the socket connection to the server.Can anyone tell me the reason of it.
If you need any more info do let me know.
Regards,
Somendra

First of all, is there a reason why you are using jRockit?
Since the issue appeared after upgrading the windows, the issue would potentially be in the interaction between JVM and OS.
Also, there were some issues related to memory leak that were fixed in AS 8.2.
May be you should try with a Sun JVM and AS 8.2.

SUN ONE Directory proxy Server on NT Server

I want to use the sun one directory proxy server on a NT Server as a LDAP Proxy Server to my customised database running on an AIX box. During the installation of the proxy server (called idar 5.0 SP1) it fails indicating that the "the server configuration directory may not be running".
IWhat am i missing? Is the ldap proxy server dependent on SUN's directory server.

Hi,
u need to have a Directory Server for the installation of the Directory Proxy Server, but not essentially the Sun ONE Directory Server itself.
regards,
raj

How do I configure a Sun One Web Server 6.1 to run JSP pages

I have a Sun One Web server version 6.1 running on Solaris 10.
The web server is not configured to run JSP pages. When I try and run a JSP page, I get an HTTP 405 error.
Can somebody please point me to the configuration directions, including changes to the obj.conf, magnus,.conf, etc.
Thanks

Web Container is enabled by default.
Here are my config files
$tail -1 magnus.conf
Init fn="load-modules" shlib="/export2/ws6.1sp11/bin/https/lib/libj2eeplugin.so" shlib_flags="(global|now)"$cat obj.conf
# You can edit this file, but comments and formatting changes
# might be lost when the admin server makes changes.
<Object name="default">
AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
NameTrans fn="ntrans-j2ee" name="j2ee"
NameTrans fn="pfx2dir" from="/mc-icons" dir="/export2/ws6.1sp11/ns-icons" name="es-internal"
NameTrans fn="document-root" root="$docroot"
PathCheck fn="unix-uri-clean"
PathCheck fn="check-acl" acl="default"
PathCheck fn="find-pathinfo"
PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
ObjectType fn="type-by-extension"
ObjectType fn="force-type" type="text/plain"
Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
Service method="TRACE" fn="service-trace"
Error fn="error-j2ee"
AddLog fn="flex-log" name="access"
</Object>
<Object name="j2ee">
Service fn="service-j2ee" method="*"
</Object>
<Object name="cgi">
ObjectType fn="force-type" type="magnus-internal/cgi"
Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
</Object>
<Object name="es-internal">
PathCheck fn="check-acl" acl="es-internal"
</Object>JAVA settings in server.xml:
<JAVA classpathsuffix="" debug="false" debugoptions="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n" dynamicreloadinterval="-1" envclasspathignored="true" javahome="/export2/ws6.1sp11/bin/https/jdk" nativelibrarypathprefix="" serverclasspath="/export2/ws6.1sp11/bin/https/jar/webserv-rt.jar:${java.home}/lib/tools.jar:/export2/ws6.1sp11/bin/https/jar/webserv-ext.jar:/export2/ws6.1sp11/bin/https/jar/webserv-jstl.jar:/export2/ws6.1sp11/bin/https/jar/ktsearch.jar">
        <JVMOPTIONS>-Djava.security.manager</JVMOPTIONS>
        <JVMOPTIONS>-Djava.security.policy=/export2/ws6.1sp11/https-alamanac.india.sun.com/config/server.policy</JVMOPTIONS>
    <JVMOPTIONS>-Djava.security.auth.login.config=/export2/ws6.1sp11/https-alamanac.india.sun.com/config/login.conf</JVMOPTIONS>
    <JVMOPTIONS>-Djava.util.logging.manager=com.iplanet.ias.server.logging.ServerLogManager</JVMOPTIONS>
    <JVMOPTIONS>-Xmx256m</JVMOPTIONS>
    <SECURITY anonymousrole="ANYONE" audit="false" defaultrealm="native">
      <AUTHREALM classname="com.iplanet.ias.security.auth.realm.file.FileRealm" name="file">
        <PROPERTY name="file" value="/export2/ws6.1sp11/https-alamanac.india.sun.com/config/keyfile"/>
        <PROPERTY name="jaas-context" value="fileRealm"/>
      </AUTHREALM>
      <AUTHREALM classname="com.iplanet.ias.security.auth.realm.webcore.NativeRealm" name="native">
        <PROPERTY name="jaas-context" value="nativeRealm"/>
      </AUTHREALM>
      <AUTHREALM classname="com.iplanet.ias.security.auth.realm.ldap.LDAPRealm" name="ldap">
        <PROPERTY name="directory" value="ldap://localhost:389"/>
        <PROPERTY name="base-dn" value="o=isp"/>
        <PROPERTY name="jaas-context" value="ldapRealm"/>
      </AUTHREALM>
            <AUTHREALM name="solaris" classname="com.iplanet.ias.security.auth.realm.solaris.SolarisRealm">
              <PROPERTY name="jaas-context" value="solarisRealm"/>
            </AUTHREALM>
    </SECURITY>
    <RESOURCES>
        </RESOURCES>
</JAVA>

How to enable fastcgi on sun one web server 6.1 SP6

Hi, all
I fail to install fastcgi on sun one web server 6.1 SP6. When i access php page, the following errors are displayed in error log.
[18/Oct/2006:14:08:45] failure (21781): for host x.x.x.x trying to GET /chkwww.php, responder-fastcgi reports: FCGI1062: Stat failure
[18/Oct/2006:14:08:45] failure (21781): for host x.x.x.x trying to GET /chkwww.php, responder-fastcgi reports: FCGI1073: Unable to service the request even after trying 0 times
The following is the environment:
Web Server path: /i03_01/SUNWebSP6
PHP 4.4.2 installation path: /i03_01/php-fcgi
PHP library path: /i03_01/php-lib
PHP configuration: ./configure prefix=/i03_01/php-fcgi enable-fastcgi with-mysql=/i03_01/tmp/mysql-standard-4.1.12-sun-solaris2.8-sparc enable-mbstring=all enable-mbregex enable-exif with-gd with-png-dir=/i03_01/php-lib with-zlib-dir=/i03_01/php-lib with-jpeg-dir=/i03_01/php-lib with-t1lib=/i03_01/php-lib with-freetype-dir=/i03_01/php-lib
libfastcgi.so path: /i03_01/SUNWebSP6/bin
The following is my configuration:
In mime.types, add this line at the bottom:
type=magnus-internal/fastcgi exts=php,php3,php4
In magnus.conf, add this line at the bottom:
Init fn=load-modules shlib="/i03_01/SUNWebSP6/bin/libfastcgi.so"
In obj.conf, add these lines at the top.
<Object name="default">
Service type="magnus-internal/fastcgi"
fn="responder-fastcgi"
app-path="/i03_01/php-fcgi/bin/php"
min-procs="1"
app-env="PHP_FCGI_CHILDREN=1"
app-env="PHP_FCGI_MAX_REQUEST=200"
app-env="PHPRC=/i03_01/SUNWebSP6/https-www/config"
</Object>
Anyone can help me? Thanks.
Message was edited by:
polyuitjerry

Stat failure is caused when either Fastcgistub or app-path is not accessible.
Is "Fastcgistub" executable too in /i03_01/SUNWebSP6/bin directory ? If not, then copy it to that directory. Make sure it has exec permission.
Do you see Fastcgistub process ? If yes, then check the app-path (/i03_01/php-fcgi/bin/php). Is it accessible ?
And also, check "Fastcgistub.log" file under <webserver-temp-dir> directory for any error msgs.

Sun Java Web Proxy Server 4.0.12 is supports Websense Web Security

Hello All,
I am using Sun Java Web Proxy 4.0.12 server and installed in RedHat Linux 5.0 OS and I can found software for Websense Web Security aoftware to protect my users and filter the traffic.
How can I integrate with Websense Web Security
Thanks & looking forward hear from you guys
Ifthekhar Javed
Riyadh.

We have migrated several reverse and acl proxy from 3.6 to 4.0.6 and have hit a few issues. If anyone has encountered these we would appriate input.
First, we thought we had caching disabled in the GUI but the server.xml still have it set to "true" in the FILECAHE entry. Will changing the entry to "false" totally disable chaching?
When we started the migrated proxy instances the server hit memory issues with swap being eaten up very quickly.
Second issue is MaxProcs in the magnus.conf. In 3.6 MaxProcs set the number of processes to start and it now for determening the number of processors in the server for threading. We are currently on a server with 6 processors. Should MaxProcs be set to six?
We will be migrating to Solaris 10 and then to a T2000 so we assume the setting will have to change for each of those migigrations.
The third issue is, has anyone run 3.6 on Solaris 10 and then migrated to 4.0 later? Sun site shows 3.6 not tested on Solaris 10 but I am sure some one has tried it.

Proxying FTP though SUN One web proxy

Hi,
I have to find a reliable FTP proxy suitable for use with command line FTP clients. Tried several so far but none meet the criteria (fast, reliable, supported) for a production-ready system.
Is there a method to configure the SUN One proxy such that an FTP client using connection format such as user@host:port can be made to work?
The existing products that I've tried so far work such that the end user does
ftp proxyhost
username = user@remotetarget:port
password
get/put/etc/etc
I need to be able to replicate that functionality.
TIA
Joe

I'm really looking for a "how-to" here. Lets say I have a client box upon which I use ncftp client. This has to talk through an internal firewall to a DMZ wherein resides the proxy. This will then talk through the external firewall to the target site (probably having traversed at least one more firewall.
What does it take to get FTP services proxied through the SUN One? If we assume that somehow whatever client software I'm actually using will provide something equivalent to ftp://user@target:port when talking to the proxy what specific tuning do I need for SUN One?
So far, what I've gleaned from the docs hasn't worked for anything other than a web browser.

How to run servlets n sun one web server 6.1

hi guys,
did u know any ony one help me , I deployed n server but at calling time some error how to call at url tell me bye
bye

Stop spamming.
http://forum.java.sun.com/thread.jspa?threadID=622182

Web Proxy Server Load Balancing

I deployed Sun Jave Web Proxy Server 4.0 as a Reverse Proxy. I would also like to use it as a load balancer. As per the instructions, I configured the obj.conf file as shown below
Route fn="set-origin-server" server="https://xx.xx.xx.xx" server="https:yy.yy.yy.yy" sticky-cookie="JSESSIONID" sticky-param="jsessionid" route-hdr="Proxy-jroute" route-cookie="JROUTE" rewrite-host="true" rewrite-location="true" rewrite-content-location="true"
But, it is not doing load balancing. It always sends to the first server (xx.xx.xx.xx). I guess that is because I used mapping as follows:
NameTrans fn="reverse-map" from="https:xx.xx.xx.xx" to="https://server.net" rewrite-location="true" rewrite-content-location="true"
NameTrans fn="redirect" from="http://server" url="https://xx.xx.xx.xx"
NameTrans fn="map" from="https://server" to="https://xx.xx.xx.xx" rewrite-host="true" name="pa-server-farm1" NameTrans fn="map" from="/" to="https://xx.xx.xx.xx" rewrite-host="true" name="pa-server-farm1"PathCheck fn="url-check"ObjectType fn="block-ip"
ObjectType fn="cache-enable" cache-auth="1" cache-https="1" query-maxlen="0" min-size="0" Service fn="proxy-retrieve"
I don't understand how routing and mapping work togother. Any help in this regard is appreciated.

Motor,
the following is from the Web Proxy Sever Administration guide. Please, check the last paragraph for the explanation. Any how, the problem is simple. I am using the Proxy Server as the Reverse proxy. And at the same time, I would like to use two origin servers (for load balancing) instead of one. How do I make both load balancing and reverse proxy functions work together?
Thanks
To Create Regular or Reverse Mapping
Access the Server Manager, and click the URLs tab.
Click the Create Mapping link.
The Create Mapping page is displayed.
In the page that appears, provide the source prefix and source destination for the regular mapping,
for example,
Source prefix: http://proxy.site.com
Source destination: http://http.site.com/
Click OK.
Return to the page and create the reverse mapping, for example,
Reverse mapping:
Source prefix: http://http.site.com/
Source destination: http://proxy.site.com/
To make the change, click OK.
Once you click the OK button, the proxy server adds one or more additional mappings. To see the mappings, click the lView/Edit Mappings link. Additional mappings would be in the following format:
from: /
to: http://http.site.com/
These additional automatic mappings are for users who connect to the reverse proxy as a normal server. The first mapping is to catch users connecting to the reverse proxy as a regular proxy. The �/� mapping is added only if the user doesn't change the contents of the Map Source Prefix text box provided automatically by the Administration GUI. Depending on the setup, usually the second mapping is the only one required, but the extra mapping does not cause problems in the proxy.

Web Proxy Server 3.6 with Administration Server using SSL connection

In your manual: Administrator�s Guide Sun� ONE Web Proxy Server Version 3.6 SP3 for UNIX you wrote:
You should also make the administrative connection a mandatory SSL connection
Instead of using http://servername:port_number
I need to use:
https://servername:port_number
How can I do that?
Thanx
Gian Mario

HI
To enable https for the admin,
Create a certifcate for the proxy admin
Next, From 'Admin Preferences', click on 'Encryption on/off'
From the 'Encryption on/off'; screen that appears, click on the 'on' radio button. Select the certficate from the alias list and click on OK to enable encryption for the cerficate you have installed for your admin server.
Now restart you admin server.
You wil now be able to connect to your admin using https
Thanks
Nagendra HK

How would a corporation deploy Sun ONE Web Proxy Server?

Similar Messages

Maybe you are looking for