German | English

HOB SSL Gateway NBIPGW08

Overview

The NBIPGW08 gateway runs under Sun Solaris. The NBIPGW08 gateway uses SSL encryption at one end (the client side) and converts to unencrypted format at the other end (the server side). The NBIPGW08 gateway can be used only on the server side. You can also use NBIPGW08 in the "demilitarized zone."

Prerequisites

The NBIPGW08 gateway runs as a 32-bit program. It runs only on Sun Ultra 64-bit processors and uses XTI. 

The NBIPGW08 gateway is started as a process in a Unix shell. For this reason, when there are a large number of connections, the process must be able to open a large number of sockets. For Solaris, the default configuration pre-defines only 256 file descriptors.

It is possible to check the number file descriptors with the command "ulimit -a". The value is returned and displayed under "nofiles(descriptors)". Before starting the redirector, the user has to set the number of descriptors based on the number of connections required. This is done using the command "ulimit -n xxxx".

Important!

Please note that the file descriptors can only be increased up to a "hard" limit. The system administrator must set this limit system-wide in the file "/etc/system" using the following values:

set rlim_fd_max=32768 # system-wide hard limit for file descriptors (max. 65535)

set rlim_fd_cur=1024 # system-wide soft limit

Attention:

Setting "set rlim_fd_cur" to a value higher than 1024 can lead to problems, e.g., the license daemon can no longer be started. For this reason, before starting the redirector, increase the number of file descriptors, e.g., using the command "ulimit -n 16000".

Usage

NBIPGW08 reads its configuration parameters from an .ini-file. The .ini-file can be edited with any usual ASCII-editor. Please note that this .ini file must observe the conventions for .ini files under Windows NT.

When NBIPGW08 is started, the first parameter specifies the name of the .ini-file.

Example:

NBIPGW08 xyz.ini