Using Multi Server TCP/IP option

Clovertech Forums Read Only Archives Cloverleaf Cloverleaf Using Multi Server TCP/IP option

  • Creator
    Topic
  • #48626
    Anonymous
    Participant

      We have a inbound connection that we want to limit the client IP that can connect to it.  We are wanting to verify that only the “trusted source” client IP can access the inbound connection.  I’m attempting to use Multi Server to limit an inbound client connection to only one client IP.  However, in testing it, I tried different scenarios to make sure it works.   I set the maximum number of connections at 2 (to be sure it works on our server as designed) and all connections worked perfectly.  I set the maximum number of connections to 1 to verify how it works.  Using the 2 client connections from the previous example, I first brought up one client thread and it connected.  The second client connection would not connect.  Just as I figured.  However, if I brought down the 1st client connection, then the second would connect.

      How do I restrict it so that only the client IP that I know is a trusted source will be allowed to connect to the server thread?   I checked the *.cli file in the process directory but the contents changed depending on which client thread is up at the time.

      Thanks..

      Thomas G. Rioux

    Viewing 1 reply thread
    • Author
      Replies
      • #59208
        Mark Thompson
        Participant

          Tom,

          I can’t control who connects, but we do have an inbound TPS proc that checks the client hostname/IP Address on messages received by a multi-host connection.  It checks against a table of allowed values.  If the message is not from an allowed host, it goes to the error database, which triggers a warning to our staff.

          The check is very useful in that rare situation where an application team refreshes their test code from production and forgets to change host and port settings.  It prevents test messages from hitting our production interfaces.

          - Mark Thompson
          HealthPartners

        • #59209
          Anonymous
          Participant

            Do you have a copy of the tcl script you would like to share?

        Viewing 1 reply thread
        • The forum ‘Cloverleaf’ is closed to new topics and replies.