Spring / roo和带有防火墙和dmz的三层架构
我们有一个大型的三层 ejb 应用程序,它由位于 dmz(非军事区)的 Web 服务器(apache tomcat)、应用程序服务器(jboss)和数据库服务器组成。
我们的客户端要求dmz和数据库服务器之间没有连接。
现在我们正在考虑Spring(ROO)的集成。
roo 的默认部署模型是连接到数据库服务器的 Web 应用程序 (war)。
在我们的场景中,Web 应用程序将在 dmz 中运行,但与数据库的连接将违反我们客户端的安全要求。
解决这个问题的最佳方法是什么(假设安全要求无法改变)?
一切顺利,
we have a big three tier ejb application, which consists of a webserver (apache tomcat) located in a dmz(demilitarized zone), an application server(jboss) and a database server.
Our client requires that there is no connection between the dmz and the database server.
Now we are thinking about integration of Spring(ROO).
The default deployment model for roo is a web application (war) which connects to a database server.
In our scenario the web application would be running in the dmz, but connections to the database would violate our clients security requirements.
what is the best way to solve this problem (assuming the security requirements can't be changed)?
all the best,
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
将战争放入 jboss 应用程序服务器中,并让 dmz 上的 apache 服务器(或类似的服务器)将请求转发给它。
总的来说,我真的会再次考虑使用 roo。它还不支持多模块项目。因此,新的 roo-app 和部署在应用程序服务器上的服务器代码之间的集成很复杂。
我们在工作中做过这类事情,由此产生的问题衡量了 roo 脚手架的好处。
put the war in the jboss application-server and let an apache-server (or something like that) on the dmz forward the requests to it.
in general i would really think again about using roo. it does not yet support multi-module projects. so the integration between the new roo-app and the server-code deployed on your application server is complicated.
we did the this sort of thing at my work and the problems that arise from it weigh out the benefits of roo's scaffolding.