Re: [Discuss] Support zones for Aries RSA. Also related to cloud support

2016-09-22 Thread Christian Schneider
On 22.09.2016 13:32, Timothy Ward wrote: On 22 Sep 2016, at 12:16, Christian Schneider wrote: There is one thing I am missing in your description. How do you configure the proxy server that provides the secure endpoint? I think the typical production approach will

Re: [Discuss] Support zones for Aries RSA. Also related to cloud support

2016-09-22 Thread Timothy Ward
> On 22 Sep 2016, at 12:16, Christian Schneider wrote: > > I think the model I described can be more secure as only the proxy needs > access to the intranet but I clearly see the need for both approaches as you > correctly stated that my approach is more complex. > >

Re: [Discuss] Support zones for Aries RSA. Also related to cloud support

2016-09-22 Thread Christian Schneider
I think the model I described can be more secure as only the proxy needs access to the intranet but I clearly see the need for both approaches as you correctly stated that my approach is more complex. I agree about the proposed changes in Topology Manager and zookeeper discovery. They should

Re: [Discuss] Support zones for Aries RSA. Also related to cloud support

2016-09-22 Thread Timothy Ward
Hi Christian, This is very nearly the approach that I suggested, but it adds an additional zone into the mix which I think is unnecessary, and I feel that hides the fact that exactly the same security concerns exist with it. In the layout that you’ve drawn the backend server publishes a

[jira] [Comment Edited] (ARIES-1618) Regression after ARIES-1342: Duplicate interface name in class file

2016-09-22 Thread Vladimir Konkov (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1618?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15510167#comment-15510167 ] Vladimir Konkov edited comment on ARIES-1618 at 9/22/16 9:02 AM: - Raise

[jira] [Updated] (ARIES-1620) Allow multiple zookeeper discovery instances and add filter config for incoming and outgoing

2016-09-22 Thread Christian Schneider (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1620?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Christian Schneider updated ARIES-1620: --- Description: We discussed about the scenario of multiple security zones. In this

[jira] [Created] (ARIES-1620) Allow multiple zookeeper discovery instances and add filter config for incoming and outgoing

2016-09-22 Thread Christian Schneider (JIRA)
Christian Schneider created ARIES-1620: -- Summary: Allow multiple zookeeper discovery instances and add filter config for incoming and outgoing Key: ARIES-1620 URL:

[jira] [Commented] (ARIES-1613) DiscoveryPlugin interface not exported

2016-09-22 Thread Christian Schneider (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1613?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512612#comment-15512612 ] Christian Schneider commented on ARIES-1613: Lets move this to the dev thread so others can

Re: [Discuss] Support zones for Aries RSA. Also related to cloud support

2016-09-22 Thread Christian Schneider
So lets think about a practical example. We want to expose a REST service that is visible to the inside via its direct url on the server that exposes the service and also via a proxy server where this service will have a different url. So the server side topology manager would detect that the

[jira] [Created] (ARIES-1619) Add javadoc in blueprint maven plugin spi

2016-09-22 Thread Dominik Przybysz (JIRA)
Dominik Przybysz created ARIES-1619: --- Summary: Add javadoc in blueprint maven plugin spi Key: ARIES-1619 URL: https://issues.apache.org/jira/browse/ARIES-1619 Project: Aries Issue Type:

[jira] [Resolved] (ARIES-1606) Extract SPI from blueptin maven plugin to external project

2016-09-22 Thread Dominik Przybysz (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1606?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dominik Przybysz resolved ARIES-1606. - Resolution: Done > Extract SPI from blueptin maven plugin to external project >

[jira] [Closed] (ARIES-1606) Extract SPI from blueptin maven plugin to external project

2016-09-22 Thread Dominik Przybysz (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1606?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Dominik Przybysz closed ARIES-1606. --- > Extract SPI from blueptin maven plugin to external project >

[jira] [Commented] (ARIES-1613) DiscoveryPlugin interface not exported

2016-09-22 Thread Timothy Ward (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1613?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512484#comment-15512484 ] Timothy Ward commented on ARIES-1613: - {quote} The people responsible for security often like to

[jira] [Commented] (ARIES-1613) DiscoveryPlugin interface not exported

2016-09-22 Thread Christian Schneider (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1613?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512448#comment-15512448 ] Christian Schneider commented on ARIES-1613: I think this highly depends on the security

[jira] [Commented] (ARIES-1616) Transaction Recovery Log does not shut down properly

2016-09-22 Thread Timothy Ward (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1616?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512454#comment-15512454 ] Timothy Ward commented on ARIES-1616: - Mislabelled - this should point at ARIES-1617 > Transaction

[jira] [Commented] (ARIES-1617) Hikari pools are not closed by the JPA Resource Providers

2016-09-22 Thread Timothy Ward (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1617?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512453#comment-15512453 ] Timothy Ward commented on ARIES-1617: - A Mislabeled commit was attached to the wrong JIRA Commit

[jira] [Commented] (ARIES-1613) DiscoveryPlugin interface not exported

2016-09-22 Thread Timothy Ward (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1613?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512415#comment-15512415 ] Timothy Ward commented on ARIES-1613: - A lot of this depends on how you define the boundary of the

[jira] [Commented] (ARIES-1606) Extract SPI from blueptin maven plugin to external project

2016-09-22 Thread ASF subversion and git services (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1606?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512306#comment-15512306 ] ASF subversion and git services commented on ARIES-1606: Commit 1761855 from

[jira] [Commented] (ARIES-1606) Extract SPI from blueptin maven plugin to external project

2016-09-22 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/ARIES-1606?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15512307#comment-15512307 ] ASF GitHub Bot commented on ARIES-1606: --- Github user asfgit closed the pull request at:

[GitHub] aries pull request #54: [ARIES-1606] Extract SPI from blueptin maven plugin ...

2016-09-22 Thread asfgit
Github user asfgit closed the pull request at: https://github.com/apache/aries/pull/54 --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is