Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (athena.apache.org: domain of sk92129@gmail.com designates
 209.85.214.171 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <1345680454710-4655464.post@n4.nabble.com>
References: 
 <CAMzDGkHu=F2M9wftSQ=w955e5TpkmRf-2G6-GQWfmvBGfF0U3g@mail.gmail.com>
	<CAMzDGkG1m4mdLkWFmEqW0FE0QafLUmy2RKqsTvrYbw+1R7SnQQ@mail.gmail.com>
	<1345675595443-4655461.post@n4.nabble.com>
	<CAMzDGkGEQL9L1+ZRaLNrgT1LWTQrxZRtkDfh_12bjjCmoAgAEA@mail.gmail.com>
	<1345680454710-4655464.post@n4.nabble.com>
Date: Wed, 22 Aug 2012 17:41:49 -0700
Message-ID: 
 <CAMzDGkGjFk3z2BkhubR=aQ=yus6LYbiuWqRTTG3xfO-T1Jsh=w@mail.gmail.com>
Subject: Re: iptables and broker to broker transport
From: Sean K <sk92129@gmail.com>
To: users@activemq.apache.org
Content-Type: text/plain; charset=ISO-8859-1

So if I set broker centos-test3 as a unidirectional bridge- it cannot
be a consumer, only a producer on a queue.

how does real world deployments handle data going in both directions?

I can think of two ways:

1.) put the broker in a less restricted DMZ zone in a company with
less ports blocked.
2.) create two sets of brokers on each side -- one companyA has
brokerA and broker B.  Broker A is used by producer.  Broker B is used
by consumer.   And companyB has broker C which is consumer used only
from broker A, and has broker D which is used by producer only from
Broker B.

So, there is no way to have a duplex brokers on both sides of two
companies with a set of ports known?

SSL is already being planned to prevent spoof-ing.   But I think a
duplex broker on both sides would be nice.

Does activemq 5.6 not handle that?


On Wed, Aug 22, 2012 at 5:07 PM, ceposta <christian.posta@gmail.com> wrote:
> The network connector in broker 2 has duplex set to "true"
> This will open a connection in both directions, which explains the random
> port on broker1.
> Can you try having uni-directional network connectors on each broker?
>
>
>
> -----
> http://www.christianposta.com/blog
> --
> View this message in context: http://activemq.2283324.n4.nabble.com/iptables-and-broker-to-broker-transport-tp4655452p4655464.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.