Sun Java System Web Proxy Server 4.0.3 2006Q2 Administration Guide

Adding and Editing Listen Sockets

Before the server can process a request it must accept the request via a listen socket, then direct the request to the correct server. When you install the Proxy Server one listen socket, ls1, is created automatically. This listen socket uses the IP address 0.0.0.0 and the port number you specified as your proxy server port number during installation. You cannot delete the default listen socket.

Listen sockets are added, edited, and deleted using the Server Manager’s Add Listen Socket and Edit Listen Sockets pages.

This section contains the following topics:

Adding Listen Sockets

ProcedureTo add listen sockets

Steps
  1. Access the Server Manager and click the Preferences tab.

  2. Click the Add Listen Socket link.

    The Add Listen Socket page displays.

  3. Specify the internal name for the listen socket.

    You cannot change this name after the listen socket has been created.

  4. Specify the IP address of the listen socket.

    Can be in dotted-pair or IPv6 notation. Can also be 0.0.0.0, any, ANY or INADDR_ANY (all IP addresses).

  5. Specify the port number to create the listen socket on. Legal values are 1 - 65535.

    On UNIX, creating sockets that listen on ports 1 - 1024 requires superuser privileges. Configure an SSL listen socket to listen on port 443.

  6. Specify the server name to be used in the host name section of any URLs the server sends to the client.

    This affects URLs that the server automatically generates but does not affect the URLs for directories and files stored in the server. This name should be the alias name if your server uses an alias.

  7. From the drop-down list, specify whether security should be enabled or disabled for the listen socket.

  8. Click OK.

  9. Click Restart Required.

    The Apply Changes page displays.

  10. Click the Restart Proxy Server button to apply the changes.

Editing Listen Sockets

ProcedureTo edit listen sockets

Steps
  1. Access the Server Manager and click the Preferences tab.

  2. Click the Edit Listen Sockets link.

    The Edit Listen Sockets page displays.

  3. In the Configured Sockets table, click the link for the listen socket you want to edit.

    The Edit Listen Sockets page displays.

  4. Make the desired changes to the following options:

    • General

      • Listen Socket ID. The internal name for the listen socket. You cannot change this name after a listen socket has been created.

      • IP Address. The IP address of the listen socket. This can be in dotted-pair or IPv6 notation. Can also be 0.0.0.0, any, or ANY or INADDR_ANY (all IP addresses).

      • Port. The port number on which to create the listen socket. Legal values are 1-65535. On UNIX, creating sockets that listen on ports 1-1024 requires superuser privileges. Configure an SSL listen socket to listen on port 443.

      • Server Name. The default server for this listen socket.

      Security

    If security is disabled, only the following parameter is displayed:

    • Security. Enables or disables security for the listen socket selected.

    If security is enabled, the following parameters are displayed:

    • Security. Enables or disables security for the listen socket selected.

      • Server Certificate Name. Select an installed certificate from the drop-down list to use for this listen socket.

      • Client Authentication. Specifies whether client authentication is required on this listen socket. This is Optional by default.

      • SSL Version 2. Enables or disables SSL Version 2. This is disabled by default.

      • SSL Version 2 Ciphers. Lists all ciphers within this suite. Select the ciphers you want to enable for the listen socket you are editing by checking or unchecking the boxes. The default versions will be unchecked.

      • SSL Version 3. Enables or disables SSL Version 3. This is enabled by default.

      • TLS. Enables or disables TLS, the Transport Layer Security protocol for encrypted communication. This is enabled by default.

      • TLS Rollback. Enables or disables TLS Rollback. Note that disabling TLS Rollback leaves connections vulnerable to version rollback attacks. This is enabled by default.

      • SSL Version 3 and TLS Ciphers. Lists all ciphers within this suite. Select the ciphers you want to enable for the listen socket you are editing by checking or unchecking the boxes. The default versions will be checked.

      Advanced

      • Number Of Acceptor Threads. The number of acceptor threads for the listen socket. The recommended value is the number of processors in the machine. The default is 1, legal values are 1-1024.

        Protocol Family. The socket family type. Legal values are inet, inet6, and nca. Use the value inet6 for IPv6 listen sockets. Specify nca to make use of the SolarisTM Network Cache and Accelerator.

  5. Click OK.

  6. Click Restart Required.

    The Apply Changes page displays.

  7. Click the Restart Proxy Server button to apply the changes.

Deleting Listen Sockets

ProcedureTo delete listen sockets

Steps
  1. Access the Server Manager and click the Preferences tab.

  2. Click the Edit Listen Sockets link.

  3. Select the check box next to the listen socket you want to delete and click OK.

    You will be prompted to confirm deletion. It is possible to delete any listen socket, provided it is not the only listen socket for that instance.

  4. Click Restart Required.

    The Apply Changes page displays.

  5. Click the Restart Proxy Server button to apply the changes.