Server Centric Computing and Managed System Access
CAIL Version
CAIL / (ActiveX)
CAIL / PCSST
CAIL / Java
CAIL / SSL PIPE
CAIL / SSL PIPE
CAIL Java Web Gateway
CAIL/ SSL PIPE
Communi-cations
6530
6530
6530
6530
6530
6530, 3270, 5250, VT, etc.
6530, 3270, 5250, VT, etc.
Gateway Require-ment
iTP WebServer with Java
iTP WebServer with Java
iTP WebServer with Java
iTP WebServer with Java
iTP WebServer with Java 1.2
Any web server with Java
Any web server with Java 1.2
HOST Require-ment
Tandem with Guardian
Tandem with Guardian and CAIL Secure Telnet Software
Tandem with Guardian
Tandem OSS with Java 1.2
Tandem with Guardian
Any HOST
Any HOST
Client Requir-ement
Win 9x, NT4, 2000 and Explorer 4+
Win 9x, NT4, 2000 and Explorer 4+
Any Java 1.1 or higher enabled Browser
Any Java 1.2 enabled Browser
Any Java 1.2 enabled Browser
Any TCP/IP Access Software
Any TCP/IP Access Software and CAIL SSL Client Software
Admini-stration
Via web page or batch file processing
Via web page or batch file processing
Via web page or batch file processing
Via web page or batch file processing
Via web page or batch file processing
Flat file administration for Non-NT, otherwise uses NT User Manager
Flat file administration for Non-NT, otherwise uses NT User Manager
Security
None
CAIL encryption
None
SSL encryption using Java on each Tandem Host
SSL encryption using Java on Gateway system
None
SSL encryption using Java on Gateway system
Clear Text
All clear text
No clear text
All clear text
No clear text
No external clear text, clear text between Gateway and Hosts
All clear text
No external clear text, clear text between Gateway and Hosts
Comments
CAIL ActiveX is more fully featured but larger than the CAIL/Java Version. CAIL/Web Gateway provides centralized load balancing and configuration control
CAIL secure communications is proven and dependable
CAIL /Java is more lightweight than the CAIL/ActiveX Version. CAIL/Web Gateway provides centralized load balancing and configuration control
SSL Security to each Tandem Host requires OSS and JVM 1.2 on each Host
Provides SSL encryption to clients and clear text communications to Host systems
Forces a logon to control access to Host machines
Provides SSL encryption to clients and clear text communications to Host systems
Architecture Description
With CAIL , deployed ActiveX controls or Java applets perform load
balanced communications to a scalable array of Tandem systems. A host based
CAIL Configuration Server and CAIL Load Balancer are provided so that user
access can be centrally controlled in a database of users and Tandems which is
set up using XML.
It is presumed that CAIL will be deployed on ITP Webserver, but
non-Tandem variants of web access gateways can also be implemented, because of
our choice to implement those web server gateways in Java.
Based on the CAIL Overview, this is explained as
follows:
(1)
The CAIL Configuration Web Page is available to administrators of the system.
It enables access to the
(2)
CAIL Configuration Editor servlet which runs in the Java environment of the
webserver. Using this
(1)
web page, the administrator enters the IP addresses of the
(3)
Scaleable array of Tandem Computers, and also sets or clears their availability
status flags. All changes are committed to the
(4)
Tandem array database through the
(10)
web server.
Using this
(1)
servlet generated CAIL Web Page, the administrator also may add accounts and
edit the
(5)
user database accounts, which includes all presets and recent user definable
optional settings with CAIL Software
(9).
The
(6)
CAIL Configuration Server and CAIL Load Balancer are combined into one Java
Server Application which references the
(4)
Tandem array database and the
(5)
user database, when preparing configuration data and ActiveX controls/Java
applets on user web pages.
Users
(7)
access the system
(8)
via a Servlet generated web page through which the users identify themselves. A
new web page containing the ActiveX/Java applet control
(9)
is sent to the user. At first the control/applet is only configured with the
address and port of the Configuration Server and with the User's Login Name. It
then connects to
(6)
the CAIL Configuration Server and CAIL Balancer Java Server Application which
checks the databases
(4,5)
and sends the rest of the appropriate configuration to the control
(9)
in the web page. Then the control uses regular or
(11)
secure communications to access the appropriate member of the
(12)
Tandem array.
Each minute feedback to the CAIL Load Balancer
(6)
is issued by
(13)
the CAIL Load Balance module in the ActiveX control/Java applet
(9)
to update the Load Balance database.
.
.
.
.
....
