I-JConsole ixhuma kurejista, bese i-RMI iyithumela kwenye indawo

Xhuma kuphothi lerejista ngomhubhe, bukela ukuxhawulana kuqala, bese ubuka i-JConsole iphelelwa yisikhathi noma kunjalo. Lokhu kwenzeka ngoba ukuxhumana kokuqala kwe-TCP akulona ukuxhumana kokuphatha: kuwukusesha. Irejista ye-RMI iphendula ngereferensi ebalula umsingathi nephothi lesibili, bese i-JConsole iya noma kuphi lapho itshelwe khona. Uma umhubhe ufinyelela kuphela kuphothi lokuqala leseva, noma uma ireferensi ibalula ikheli elikhona kuphela ku-LAN yeseva uqobo, iklayenti liyama ngemva kokubonakala liphumelele.

Inganekwane: iphothi elilodwa elivuliwe ukuxhumana okukodwa

I-JMX ekude nge-RMI ihilela okungenani izindawo ezimbili zokugcina, futhi zikhethwa izingxenye ezihlukene zohlelo. Iphothi lerejista yilona olibhala kuklayenti, futhi likhona ukuze linikeze i-stub echaza isixhumi sangempela. Ukuthatha isokhethi yokuqala ephumelele njengobufakazi bokuthi indlela yokuphatha ivuliwe yikho okushintsha ukuxilongwa kwemizuzu emibili kube ntambama egcwele amathikithi e-firewall.

Bheka iphutha leklayenti ngokwalo esikhundleni sohlu lwabalaleli basesevini. Ukwehluleka ngemva kokuqala kokuxhawulana kukutshela ukuthi ukuxhumana kwesibili, hhayi okokuqala, akuzange kuqedwe.

Yini erejista eyibuyisayo

I-stub iqukethe ikheli nephothi, okuhlelwe ngesikhathi isixhumi sidalwa. Kuseva enezixhumanisi eziningi, isitaki kungenzeka sikhethe ikheli elifinyeleleka kunethiwekhi yasendaweni hhayi kweyakho. Iklayenti aliwazi umehluko; lishaya nje inani elilinikiwe, futhi iphakethe lilandela umzila okhona walelo kheli, okungase kungabikho nhlobo kuklayenti ye-VPN. Yileso sikhathi lapho kuzanywa khona ukuxhumana kwesibili.

Yingakho futhi ukwehluleka kwenzeka ngezikhathi ezithile phakathi kwezimo: iseva efanayo ingaziphatha ngendlela ehlukile kumsebenzisi osemthethweni we-LAN nakumsebenzisi osemhubheni, ngaphandle koshintsho oluthile ekucushweni kwe-JMX.

Amaphothi amabili kanye nezakhiwo ezimbili ezibagxilisa

Iphothi lerejista livela ku-com.sun.management.jmxremote.port, futhi isixhumi singagxiliswa nge-com.sun.management.jmxremote.rmi.port esikhundleni sokushiya lokho okwabiwa yisitaki. Setha kokubili ngokucacile uma kukhona i-firewall noma iqembu lokuphepha phakathi kweklayenti neseva, ngoba iphothi lesibili elingalindelekile alikwazi ukuvunyelwa ngaphambili, futhi ububanzi obuvulwe ukulihambisa bubi kakhulu kunokugxilisa inani elilodwa.

Bese uqinisekisa nge-ss -ltn noma nge-netstat -an kuseva ukuthi womabili amaphothi alalela nokuthi akuphi amakheli. Umlaleli oboshelwe ku-loopback ulungile ekusetshenzisweni kwasekhaya kuphela futhi akanamsebenzi kulokhu.

Uma igama elimenyezelwe lingalungile

Igama lomsingathi elivela kureferensi ekude lisethwa yi-java.rmi.server.hostname. Linomthelela kulokho i-stub ekumenyezelayo; ngokwalo akusona isiyalelo sokubopha wonke umlaleli kusixhumanisi esisodwa, yingakho ukulisetha kungasihluthi ngaso sonke isikhathi isimilo sephothi elilodwa esilindelekile. Lisethe, qala kabusha inqubo, bese uqinisekisa ukuthi i-stub iqukethe ini ngempela. Khetha igama noma ikheli iklayenti elingalixazulula futhi elingafinyelela kulo ngomhubhe, bese uqala kabusha inqubo ukuze i-stub yakhiwe kabusha.

Amanethiwekhi ekhonteyina awenza abe mubi kakhulu, ngoba ikheli inqubo elibonayo lingaba ngelangaphakathi okungekho lutho olungaphandle kwekhonteyina olungalidlulisela kulo. Shicilela igama lomsingathi elihlosiwe ngokucacile esikhundleni sokuvumela ipulatifomu ikhethe.

Uma wenza umhubhe nge-SSH hhayi nge-VPN, inkinga efanayo ivela ngezinye izingubo: ukudlulisa iphothi lerejista kuphela kushiya indawo yesibili ikhomba ikheli iklayenti lakho elingakwazi ukufinyelela kulo. Dlulisa womabili amaphothi futhi wenze igama elimenyezelwe lixazuluke libe yinto iklayenti elingayifinyelela yona endaweni.

Ungavali ukuphepha kokuphatha ukuze wenze kube lula

Iziqeshana ezivala ubuqiniso ne-TLS zitholakala kalula futhi zenza ukuxhumana kusebenze ngendlela ozozihoxisa ngayo kamuva. I-JMX ekude iyisixhumanisi sokuphatha esinamagunya afanayo nalawo inqubo eyihlolayo enawo; gcina izilawuli zayo zokufinyelela, futhi uma iklayenti lingakwazi ukwethula ubufakazi, lungisa lokho esikhundleni salokho.

Uma izindawo zokugcina zilungile, gcina iphutha elilandelayo olibonayo. Ukwenqatshwa kwemali yokuthemba noma i-akhawunti kuyisigaba sakamuva kunokuxhumana okungafinyeleleki futhi kusho ukuthi umsebenzi wenethiwekhi uqediwe.