Glacier2.Filter.Address.Reject

ren-weiren-wei Member wei renOrganization: Hainan AirlineProject: support external system connect ticketsalesystem
Hi ,
I have a problem in my demo about Glacier2.Filter.
"Glacier2.Filter.Address.Reject=10.68.17.100:4063" don't take effect.
My server and glacier are deployed on 10.68.8.61,and Clinet is on 10.68.17.100.My client can visit server all the time...
Can you tell me where the fault is ?
Thanks

client.config:
Ice.Default.Router=helloGlacier2/router:tcp -p 4063 -h 10.68.8.61
hello.Proxy=hello:tcp -h 10.68.8.61 -p 10001

server.config:
helloSrv.Endpoints=tcp -h 10.68.8.61 -p 10001
Ice.Warn.Connections=1

config.glacier2:
Glacier2.InstanceName=helloGlacier2
Glacier2.Client.Endpoints=tcp -p 4063 -h 10.68.8.61
Glacier2.Server.Endpoints=tcp -h 10.68.8.61

Glacier2.PermissionsVerifier=helloGlacier2/NullPermissionsVerifier
Glacier2.SessionTimeout=30

Glacier2.Filter.Address.Reject=10.68.17.100:4063
#Glacier2.Filter.Address.Accept=10.68.8.61:4063

Glacier2.Client.ForwardContext=1
Glacier2.Server.ForwardContext=1

Glacier2.Client.SleepTime=500
Glacier2.Server.SleepTime=500

Glacier2.Client.Trace.Request=1
Glacier2.Server.Trace.Request=1
Glacier2.Client.Trace.Override=1
Glacier2.Server.Trace.Override=1
Glacier2.Client.Trace.Reject=1
Glacier2.Trace.Session=1
Glacier2.Trace.RoutingTable=1

Ice.Warn.Connections=1

Comments

  • ren-weiren-wei Member wei renOrganization: Hainan AirlineProject: support external system connect ticketsalesystem
    my programming language is java,ice version is 3.4.1
  • bernardbernard Jupiter, FLAdministrators, ZeroC Staff Bernard NormierOrganization: ZeroC, Inc.Project: Ice ZeroC Staff
    Hi,

    Glacier2.Filter.Address.Reject (and Glacier2.Filter.Address.Accept) does not filter based on the IP address of the client, but based on the IP address and port number of endpoints in the proxy:

    When defined, the Glacier2 router rejects requests to Ice objects through proxies that contain network endpoint information that matches an address–port pair listed in this property.

    Hope this is clearer now!

    Best regards,
    Bernard
  • ren-weiren-wei Member wei renOrganization: Hainan AirlineProject: support external system connect ticketsalesystem
    Thanks very much
Sign In or Register to comment.