Try OpenEdge Now
skip to main content
Administration
WebSpeed Administration : WebSpeed Security : Maximizing WebSpeed compatibility with your firewall : Using the NameServer client port range value settings with a firewall
 
Using the NameServer client port range value settings with a firewall
The WebSpeed Messenger communicates with the NameServer using the User Datagram Protocol (UDP). When the WebSpeed Messenger initiates the connection, it sends a UDP packet to the known NameServer port. When the NameServer receives the packet, it sends a response packet, also in UDP packet form, back to the WebSpeed Messenger.
To facilitate communication when a firewall exists between the WebSpeed Messenger and the NameServer, you could open all UDP ports from the machine that is running the NameServer to the machine that is running the WebSpeed Messenger.
However, opening all 65,000 UDP ports from inside the firewall to outbound ports is a time-consuming job. Also, opening every port is not a necessity. You can specify a client port range minimum with minNSClientPort and a client port range maximum with maxNSClientPort.
Using these two parameters, a firewall administrator can restrict the UDP response from the NameServer to the client. The administrator can specify a range of ports in the properties file and therefore reduce the number of UDP ports that are open in the firewall.
The following rules apply to the values set for these parameters:
*The value for these two parameters must be a number between 1024 and 65535 inclusive (or 0).
*The minNSClientPort also must be less than maxNSCCllientPort.
*If both minimum and maximum values are set to zero, then a random port number will be dynamically assigned. This is the default setting. The assigned port number will be in the range of 1024 through 65535.
*If both minimum and maximum values are set to the same number, the port number will be used exclusively for NameServer communication.