WebLogic学习笔记【Node Manager, SSL, Session Tracking】

Node Manager

NM is a standalone Java Tool for managing the availability of all Managed Server running on a machine. It runs as a dedicated process on a machine.

 

In order to control the life cycle of a Managed Server, you must using either the Admin Server or Admin tool through NM.

 

[Version 8.1] A Node Manager does not control the starting and stopping of the Admin Server, so the host machine of Admin Server does not need a NM.

 

Important to note that when NM is used, each Server is started up through NM using Admin Console or JMX application, not the startup scripts of its own.

 

For security consideration, provide 2 ways:

1.      You can instruct the NM to accept connections from certain trust host only.

2.     The NM and the Admin Server communicate through SSL, so both of them must be configured to user SSL.

 

In order to configure a list of trust hosts, you must create a text file with addresses of all Admin Server that allowed to connect the NM. Each line specifies either the IP address or the DNS host name of an Admin Server. By default, NM uses the nodemanager.hosts file located under the WL_HOME/common/nodemanger.

 

You can indicate other files to show trust host list using the following parameter:

 –Dweblogic.nodemanger.trustedHosts=nodemanager.myhosts

 

The best way to modify the default setup is to edit the nodemanger.properties file in the WL_HOME/common/nodemanager directory. A Node Manager uses the same public key infrastructure as WebLogic Server itself, and the default installation uses the DemoIdentity.jks and DemoTrust.jks stores. So, if you just want to get everything going, you can use the default configuration and ignore the rest of setup.

 

The default nodemanger.properties file also provides the syntax for most properties, for example, depending on which keystores you wish to use, the KeyStores property can take any of the following values:

KeyStores=CustomIdentityAndCustomTrust

CustomIdentityKeyStoreFileName=c:/mystores/myIdentityStore.jks

CustomIdentityKeyStorePassPhrase=mykeystorepass

CustomIdentityKeyStoreType=JKS

CustomIdentityAlias=myalias

CustomIdentityPrivateKeyPassPhrase=mypassword

 

Additional configuration properties of NM properties: