Sun Java System Web Proxy Server 4 Release Notes

Sun Java™ System Web Proxy Server Release Notes

Version 4

Part Number 819-0906-10

These release notes contain important information available at the time of the release of the Sun Java™ System Web Proxy Server 4 product, hereafter referred to as Proxy Server 4. Platform summary and known problems are addressed here. Please read this document and associated documents before you begin using the Sun product.

This document contains the following sections:

New in Sun Java System Web Proxy Server 4

Proxy Server 4 includes the following new features:

Modern HTTP Core

Proxy Server 4 has a multi-threaded architecture. It is HTTP/1.1 compliant and supports IPv6 notation for IP addresses.

Enhanced Administration User Interface

Proxy Server 4 has a new, easy to use administration user interface that has a consistent look and feel across all screens.

Enhanced Installer User Interface

Proxy Server 4 includes a new, easy to use installer user interface that provides GUI, CLI, and silent modes for installing the server.

Security Enhancements

Proxy Server 4 includes the following security enhancements:

Performance Enhancements

Proxy Server 4 has enhanced performance in the following areas:

New Dynamic Reconfiguration

Dynamic reconfiguration is a new feature in Proxy Server 4 that allows you to make configuration changes to a live proxy server without having to stop and restart the proxy server for the changes to take effect. You can dynamically change most of the configuration settings and attributes in server.xml and its associated files without restarting the server. To install a new configuration dynamically, click the Restart Required link in the administration user interface and then click Load Configuration Files. If there are errors in installing the new configuration, the previous configuration is restored.

New server.xml File

The new server.xml file records server configuration information in a XML format.

NSAPI Filters Support

Proxy Server 4 extends the Netscape Server Application Programmer’s Interface (NSAPI) to support NSAPI filters. Filters enable the custom processing of HTTP request and response streams, allowing a function to intercept and potentially modify the content presented to or generated by another function.

HTTP Compression Support

Proxy Server 4 supports content compression, which allows you to increase delivery speed to clients and serve higher content volumes without incurring a corresponding increase in hardware expenses. Content compression reduces content download time, a benefit most apparent to users of dial-up and high-traffic connections.

Content URL Rewriting Support

Proxy Server 4 provides added support for content URL rewriting, which allows you to create a filter that examines outgoing data and substitutes one string for another. The string can be a URL or page content. This feature works in the reverse proxy mode.

HTTP Session-aware Load Balancing

Proxy Server 4 does session-aware load balancing for web application requests based on JSESSIONID.

NSS 3.9.5 and NSPR 4.5.1 Support

Proxy Server 4 supports Network Security Services (NSS) 3.9.5 and Netscape Portable Runtime (NSPR) 4.5.1.

Enhanced Hardware Accelerator Encryption Support

Proxy Server 4 provides hardware accelerator support for Sun™ Crypto Accelerator 4000, a cryptographic accelerator board that enhances the performance of SSL on the Proxy Server.

Not Available in Proxy Server 4 Release

The following feature is not available in Proxy Server 4 release:

Platform Summary

This section provides information about supported platform components for Proxy Server 4.

This section includes the following topics:

Platform Requirements

The following table summarizes the Proxy Server 4 platform requirements.

Table 1  Platform Requirements for Proxy Server 4

Operating System

Minimum Memory

Recommended Memory

Recommended Disk Space*

Sun Solaris™ 8 for SPARC®

256 MB

512 MB or higher

512 MB or higher

Trusted Sun Solaris 8 for SPARC

256 MB

512 MB or higher

512 MB or higher

Sun Solaris 9 for SPARC

256 MB

512 MB or higher

512 MB or higher

Sun Solaris 10 for SPARC

256 MB

512 MB or higher

512 MB or higher

Sun Solaris 9 for x86

256 MB

512 MB or higher

512 MB or higher

Sun Solaris 10 for AMD Opteron™

256 MB

512 MB or higher

512 MB or higher

Red Hat Linux Advanced Server 2.1

256 MB

512 MB or higher

512 MB or higher

Microsoft Windows 2000 Server Service Pack 4

256 MB

512 MB or higher

512 MB or higher

Microsoft Windows 2000 Advanced Server

256 MB

512 MB or higher

512 MB or higher

Microsoft Windows 2003 Enterprise Edition

256 MB

512 MB or higher

512 MB or higher

*Depends on cache capacity setting. The default cache capacity setting is 2GB

Supported Browsers

The following table lists the browsers that are supported with Proxy Server 4.

Table 2  Supported Browsers for Proxy Server 4

Browser

Version

Microsoft Internet Explorer

6.0

Netscape™

7.1, 7.2

Mozilla™

1.4.1, 1.7.2

Hardware and Software Requirements

In addition to the UNIX operating system memory and disk space requirements listed in Platform Requirements, your system must also have adequate swap space:

Accessing the Documentation

The Sun Java System Web Proxy Server 4 documentation is provided in a number of ways:

Known Issues

This section lists the more important known issues and limitations at the time of the Sun Java System Web Proxy Server 4 release. The issues are listed by category:

Administration

The following table lists the known issues related to the administration user interface.

Table 3  Known Issues in Administration

ID

Summary

6213012

ROTATELOGS event on Windows is not triggered at the time specified.

6213014

RESTART event on Windows is not triggered at the time specified.

6213017

RECONFIG event on Windows is not triggered at the time specified.

6224535

The timeout and retries parameters for the HTTP client cannot be configured through the administration interface.

Workaround

The default value for the timeout parameter is five minutes and can be overridden by including the parameter, timeout= number of seconds in the http-client-config SAF of the obj.conf file.

The default value for the retries parameter is three. The number of request retries can be configured by including the parameter retries=number of retries in the http-client-config SAF of the obj.conf file.

The effective timeout is timeout x retries

6241978

There maybe errors while accessing the administration interface on Windows.

Workaround

Ensure that the system32 directory on your system contains libnspr4.dll of version 4.5.1 or later else, copy the file from the %install_dir%\bin\proxy\bin directory into the system32 directory and restart the administration server.

6231297

The Restart Required link disappears if changes are made to the SOCKS configuration and the Proxy Server is restarted instead of the SOCKS Server.

Caching

The following table lists the known issues related to caching.

Table 4  Known Issues in Caching

ID

Summary

6275141

The File Cache feature is shown in the GUI and documented for the Server Manager > Caching > Configure File Cache page, but the feature is not implemented in this release of Proxy Server 4.

Documentation

The following table lists the known issues related to documentation.

Table 5  Known Issues in Documentation

ID

Summary

6263694

Online Help unavailable for the Add and Replace Compromised Key List and Certificate Revocation List pages.

To access the online Help for these pages, do the following:

  1. Access either the Administration Server or the Server Manager and click the Security tab.
  2. Click the Install CRL/CKL link.
  3. Click the Help button in the upper right corner of the user interface.

Online Help for the Install Certificate Revocation List/Compromised Key List page displays, providing links to the information pertaining to Add and Replace.

Installation

The following table lists the known issues related to installation.

Table 6  Known Issues in Installation

ID

Summary

6205683

Windows console installation fails.

6255325

The installer throws an exception and the installation fails on Linux if the user installs the Proxy Server as a non-root user and the /var/opt/sun/install directory does not exist.

Internationalization

The following table lists the known issues related to internationalization.

Table 7  Known Issues in Internationalization

ID

Summary

6233080

The Disable Proxying option does not work for the URL with multibyte data (URL encoded) when routing is set through another proxy.

6233090

A URL with multibyte data (URL encoded) cannot be mapped.

6233093

A filter cannot be created for a URL with multibyte data (URL encoded).

6233100

Multibyte strings from the page being retrieved cannot be rewritten.

6242627

Localized core messages are not getting displayed.

6246562

Controlling a set of servers installed on different locales and platforms through clusters fails when stopping the set of servers.

Workaround

Stop each server individually.

Localization

The following table lists the known issues related to localization.

Table 8  Known Issues in Localization

ID

Summary

6259314

Some of the localized online help pages are not synchronized with the English online help pages. The following changes have been made in the English online help:

  1. In the Administration server > Global Settings >Set SNMP Master Agent Community page, "UNIX/Linux" has been removed from the page title and a reference to UNIX and Linux has been added in the page description.
  2. In the Administration server > Global Settings >Set SNMP Master Agent Trap page, "UNIX/Linux" has been removed from the page title and a reference to UNIX and Linux has been added in the page description.
  3. In the Administration server > Global Settings >Control SNMP Master Agent page, "UNIX/Linux" has been removed from the page title and a reference to UNIX and Linux has been added in the page description.
  4. In the Administration Server/Server Manager > Security > Install CRL/CKL page, the page title has been changed from "The Install CRL/CKL Page" to "The Install Certificate Revocation List/Compromised Key List Page" and a corresponding change has been made in the page description.
  5. In the Administration Server/Server Manager > Security > Manage CRL/CKL page, the page title has been changed from "The Manage CRL/CKL Page" to "The Manage Certificate Revocation List/Compromised Key List Page" and a corresponding change has been made in the page description. The line "Based on your selection on The Manage CRL/CKL Page, the Edit CKL/CRL page displays information for a CKL or CRL." has been changed to "Based on your selection on The Manage Certificate Revocation List/Compromised Key List Page, the Edit CKL/CRL page displays information for a CKL or CRL."
  6. In the Server Manager > Caching > Set Cache Specifics page, the description of the working directory has been modified.
  7. In the Server Manager > Caching > Manage Sections page, the page description has been modified.
  8. In the Server Manager > Caching > Tune Cache page, the page description has been modified.
  9. In the Server Manager > Caching > Set Caching Configuration page, the content has been formatted.
  10. In the Server Manager > Server status > Set Access Log preferences page, the description of the Log Client accesses element has been modified. "Virtual servers" has been deleted from the page description.
  11. In the Server Manager > Caching >View URL Database page, the page description has been modified.

 

Monitoring

The following table lists the known issues related to monitoring.

Table 9  Known Issues in Monitoring

ID

Summary

6268536

SNMP on Windows does not work if the libnspr4.dll file is not present in the system32 directory.

Workaround

Ensure that the system32 directory on your system contains libnspr4.dll of version 4.5.1 or later else, copy the file from the %install_dir%\bin\proxy\bin directory into the system32 directory and restart the administration server.

SOCKS

The following table lists the known issues related to SOCKS.

Table 10  Known Issues in SOCKS

ID

Summary

6245453

The Quench Updates feature is shown in the GUI and documented for the Server Manager > SOCKS > Configure SOCKS v5 page, but the feature is not implemented in this release of Proxy Server 4.

6263389

No error is reported when two instances of SOCKS are started using the same port on Windows.

How to Report Problems and Provide Feedback

If you have problems with Sun Java System Web Proxy Server 4, contact Sun customer support using one of the following mechanisms:

Please include the following information:

Copyright © 2005 Sun Microsystems, Inc. All rights reserved.

Sun Microsystems, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed at http://www.sun.com/patents and one or more additional patents or pending patent applications in the U.S. and in other countries.

SUN PROPRIETARY/CONFIDENTIAL.

U.S. Government Rights - Commercial software. Government users are subject to the Sun Microsystems, Inc. standard license agreement and applicable provisions of the FAR and its supplements.

Use is subject to license terms.

This distribution may include materials developed by third parties.

Portions may be derived from Berkeley BSD systems, licensed from U. of CA.

Sun, Sun Microsystems, the Sun logo, Java and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the U.S. and other countries. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. in the U.S. and other countries.

Copyright © 2005 Sun Microsystems, Inc. Tous droits réservés.

Sun Microsystems, Inc. détient les droits de propriété intellectuels relatifs à la technologie incorporée dans le produit qui est décrit dans ce document. En particulier, et ce sans limitation, ces droits de propriété intellectuelle peuvent inclure un ou plus des brevets américains listés à l'adresse http://www.sun.com/patents et un ou les brevets supplémentaires ou les applications de brevet en attente aux Etats - Unis et dans les autres pays.

Propriété de SUN/CONFIDENTIEL.

L'utilisation est soumise aux termes du contrat de licence.

Cette distribution peut comprendre des composants développés par des tierces parties.

Des parties de ce produit pourront être dérivées des systèmes Berkeley BSD licenciés par l'Université de Californie.

Sun, Sun Microsystems, le logo Sun, Java et Solaris sont des marques de fabrique ou des marques déposées de Sun Microsystems, Inc. aux Etats-Unis et dans d'autres pays.

Toutes les marques SPARC sont utilisées sous licence et sont des marques de fabrique ou des marques déposées de SPARC I