Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (herse.apache.org: local policy)
Mime-Version: 1.0 (Apple Message framework v752.2)
In-Reply-To: <9370301.post@talk.nabble.com>
References: <9355565.post@talk.nabble.com> <45EF3413.8030004@ldsys.net>
 <608A6F19-E524-4766-AAEE-703769A4CD5A@aconex.com>
 <9370301.post@talk.nabble.com>
Content-Type: multipart/signed; micalg=sha1;
 boundary=Apple-Mail-60--339256488; protocol="application/pkcs7-signature"
Message-Id: <1AC45FE7-0CE2-4319-8C1B-5C4F1B30E3A1@aconex.com>
From: Paul Smith <psmith@aconex.com>
Subject: Re: [Spam: 5.0] JMX Remote Access - Necessary ports
Date: Fri, 9 Mar 2007 08:22:34 +1100
To: users@activemq.apache.org

--Apple-Mail-60--339256488
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=US-ASCII;
	delsp=yes;
	format=flowed


On 08/03/2007, at 7:15 PM, Juergen Mayrbaeurl wrote:

>
> What kind of JMX connector do I need for JManage? Can I use the RMI
> connector? Does JManage have to run on the same machine?
>
> Greetings
> Juergen
>


You can specify via a URL syntax exactly what connector to use to  
connect to a given host.  We use the default RMI connector, and have  
a specific host in our production data centre that is used as the  
JManage instance.  Jmanage is then configured with the URL's to talk  
to each of the production java processes inside that network

So, to answer your question, no, JManage doesn't have to run on the  
same machine, and will suffer from the same problem that any other  
RMI based JMX client would have with regards to firewalls.  That's  
why it's useful to have JManage inside production, and then expose a  
single HTTP/S port to connect to it.  We have a setup where we  
configure JManage to listen on localhost:9090.  This means to connect  
to it one needs to use SSH port forwarding to link jmanage and our  
browser together, and I can 'browse' on localhost:9090 on my machine,  
and that browses direct to the jmanage instance on the remote  
system.  This is simply a security measure.  Rather than expose the  
port directly to the firewall, one would need shell access on the  
jmanage host to be able to configure any jmanage-controlled instance.

The other good thing about this setup is that it is much faster than  
a direct client access, say via JConsole one your localhost.  Due to  
latency over a slow network, JConsole is unusable.  We are in  
Australia, and have production systems in Dubai and London which is  
over a loooooooong, and slow link.  JConsole is unusable in this  
scenario, but jmanage inside the production systems accessed via a  
browser is incredibly fast.

JManage also has some useful command-line tools too, so you can  
easily script operational tools that invoke JMX operations.

I couldn't live without it.

Paul
--Apple-Mail-60--339256488
Content-Transfer-Encoding: base64
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Disposition: attachment;
	filename=smime.p7s
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--Apple-Mail-60--339256488--