Firewall support

This topic is only applicable to the grid version of Symphony.

You need to open up a few ports (vemkd, Session Director, session manager) in the firewall for the client to interact with the grid. The client first communicates with the vemkd and gets the port information of the Session Director. The client then connects to the Session Director and gets the port information of the session manager and then connects to the session manager. It is important to set appropriate port ranges for session managers because there may be multiple session managers in a Symphony grid.

By default, vemkd and Session Director are configured with the fixed port numbers. It is required to configure the session manager ports for firewall support in the sd.xml file:

Component

Configuration file

vemkd

(Resource Manager)

Windows: %EGO_CONFDIR%\ego.conf

Linux/UNIX: $EGO_CONFDIR/ego.conf

Session Director

Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\services\sd.xml

Linux/UNIX: $EGO_CONFDIR/../../eservice/esc/conf/services/sd.xml

Session Manager

It is required to configure the Session Manager ports for firewall support:

Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\services\sd.xml

Linux/UNIX: $EGO_CONFDIR/../../eservice/esc/conf/services/sd.xml


Configure

  1. To configure a firewall for Symphony, you have to open the ports on the firewall that are required for the connection protocols enabled on your client. Make sure you plan to open the relevant SD, vemkd, and SSM ports.
  2. Log on to the master host as the cluster administrator and shut down the Symphony grid completely.
    1. Disable all applications

      soamcontrol app disable all

    2. Stop all services

      egosh service stop all

    3. Shut down the Symphony grid

      egosh ego shutdown all

  3. Open the sd.xml file and add the port range for the SSM_SDK_ADDR and SSM_SIM_ADDR parameters. Note that you only need to define the SSM_SIM_ADDR parameter if you have a firewall between the SSMs and the SIMs.

    If there is more than one platform, then you need to add the port range for all of them.

    Example:
    <sc:ActivityDescription>
    ..............................
    <ego:EnvironmentVariable name="SD_ADMIN_PORT">@ADMIN_PORT@</ego:EnvironmentVariable><ego:EnvironmentVariable name="SD_SDK_PORT">@SDK_PORT@</ego:EnvironmentVariable>
     <ego:EnvironmentVariable name="SSM_SDK_ADDR">31000-32000</ego:EnvironmentVariable>
     <ego:EnvironmentVariable name="SSM_SIM_ADDR">32001-33000</ego:EnvironmentVariable>
    ................................
    </sc:ActivityDescription>
    Note:

    .You should ensure that the port range is sufficient for the number of SSMs that you expect to run on the same host.

    Note:

    Port range should be equal to or greater than the maximum number of slots in the management host.

  4. Start up the Symphony grid.

    egosh ego start all

    Enable all the disabled applications.