You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@activemq.apache.org by carbon60 <ad...@sherman.ca> on 2008/03/27 19:13:09 UTC
Restricting Multicast Discovery
I apologize for asking basic questions! I am trying to configure multicast
discovery among brokers on an insecure network. Is this possible or a good
idea?
I don't know much about multicast, so I don't understand how to restrict
which systems get connected.
Thanks,
A.
--
View this message in context: http://www.nabble.com/Restricting-Multicast-Discovery-tp16329694s2354p16329694.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.
Re: Restricting Multicast Discovery
Posted by James Strachan <ja...@gmail.com>.
On 28/03/2008, carbon60 <ad...@sherman.ca> wrote:
>
>
> James.Strachan wrote:
> >
> > On 27/03/2008, carbon60 <ad...@sherman.ca> wrote:
> >> I apologize for asking basic questions! I am trying to configure
> >> multicast
> >> discovery among brokers on an insecure network. Is this possible or a
> >> good
> >> idea?
> >>
> >> I don't know much about multicast, so I don't understand how to restrict
> >> which systems get connected.
> >
> > You can use different multicast addresses for different groups of
> > systems; but multicast is insecure; so you probably wanna use security
> > in the brokers to prevent unwanted connections etc.
> >
>
>
> Is there anything needed at the OS-level to create a multicast group, or can
> I just invent an address?
Just use any multicast address you like - provided multicast is
enabled you're good to go.
> Also, I need to at least restrict the multicast broadcasts to a specific
> network interface, is this possible?
Its up to clients to subscribe to the multicast address; if they don't
subscribe, they won't get the messages. But multicast goes everywhere
- you can't limit it to specific network cards.
--
James
-------
http://macstrac.blogspot.com/
Open Source Integration
http://open.iona.com
Re: Restricting Multicast Discovery
Posted by carbon60 <ad...@sherman.ca>.
James.Strachan wrote:
>
> On 27/03/2008, carbon60 <ad...@sherman.ca> wrote:
>> I apologize for asking basic questions! I am trying to configure
>> multicast
>> discovery among brokers on an insecure network. Is this possible or a
>> good
>> idea?
>>
>> I don't know much about multicast, so I don't understand how to restrict
>> which systems get connected.
>
> You can use different multicast addresses for different groups of
> systems; but multicast is insecure; so you probably wanna use security
> in the brokers to prevent unwanted connections etc.
>
Is there anything needed at the OS-level to create a multicast group, or can
I just invent an address?
Also, I need to at least restrict the multicast broadcasts to a specific
network interface, is this possible?
I will look into using some form of basic security.
Thank you,
A.
--
View this message in context: http://www.nabble.com/Restricting-Multicast-Discovery-tp16329694s2354p16349362.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.
Re: Restricting Multicast Discovery
Posted by James Strachan <ja...@gmail.com>.
On 27/03/2008, carbon60 <ad...@sherman.ca> wrote:
>
> I apologize for asking basic questions! I am trying to configure multicast
> discovery among brokers on an insecure network. Is this possible or a good
> idea?
>
> I don't know much about multicast, so I don't understand how to restrict
> which systems get connected.
You can use different multicast addresses for different groups of
systems; but multicast is insecure; so you probably wanna use security
in the brokers to prevent unwanted connections etc.
--
James
-------
http://macstrac.blogspot.com/
Open Source Integration
http://open.iona.com