Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: neutral (nike.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=rocketmail.com;
  h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
  b=X90uDzlRnuxkfR52aooDQs5JhcVxWH9gBPRJtQk0misqnXUxyDKfny7EjxxZec228BEOWQzLxKjOlq9wpeLFTS9ACkOmBKUE/0aw+rB97suRR8Z4oWOJ4zDYE32eoCmVsQaBu43wuIhvEgrCp9UOI09GAZEcQNBDuZTALp/9tv4=;
Message-ID: <493142.43019.qm@web50805.mail.re2.yahoo.com>
References: <23374981.post@talk.nabble.com>
Date: Mon, 4 May 2009 12:43:51 -0700 (PDT)
From: Jose Luna <j-luna@rocketmail.com>
Subject: Re: No way to use activeMQ via http. TCP works fine,
 but not http. Please help.
To: users@activemq.apache.org
In-Reply-To: <23374981.post@talk.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii


> Jose Luna-2 wrote:
> > 
> > I don't have any recommendation regarding activemq and HTTP but you may
> > consider tunneling openwire through SSL
> > (http://activemq.apache.org/ssl-transport-reference.html).    If you set
> > your broker up to use port 443, proxies won't be able to distinguish
> > between this traffic and HTTPS, so the traffic will be allowed to pass
> > through.   Actually, you would be able to get away with running the
> > traffic over port 443 without using the SSL transport, but that somehow
> > seems more deceptive ;) .   For more info, see
> > http://tools.ietf.org/html/draft-luotonen-web-proxy-tunneling-01 .
> > 
> >    
> > 
> > 
> Thank you for your reply, sir.
> Other words, you telling I may use 443 port via tcp. An my clients will be
> able to connect to server through this port even if they under the proxy.
> Correct?
> 
> Any way, guys, could you provide me other solutions, please.
> 
> Thank you.


Yes.  It's just a suggestion that I thought you might find useful.  You will need to be able to do the HTTPS handshake (see the ietf.org link I sent in my previous email).  You will also need to be able handle proxy authentication for users that requrie it, but that's something you would have to handle anyway if you are dealing with proxies.