Two-Tier Application Architecture

For some applications, especially existing services, a two-tier architecture for access via Sun Internet Administrator is more practical. These services can be managed from Sun Internet Administrator, but do not receive the security benefits of single sign-on and logging.

Figure 1-4 Two-Tier ISP Service Architecture

As shown in Figure 1-4, an administrator uses the following steps to access a service's administration functions:

1. From a browser, the administrator requests a specific URL (the location of the main console GUI page).

   This step is the same as for the three-tier architecture. The AWC is downloaded to the client browser, where the administrator can choose a service to manage.

2. The selected service resolves to a URL, designating the component's ASRA. If the service's administration GUI is not browser-based, other protocols may be used at the developer's option.

3. Subsequent access is directly between the client browser and the service's remote agent. Appropriate IP-level security measures should be taken to protect this connection and its traffic.

   In a two-tier architecture, services are not able to take advantage of the single sign-on feature.