Page History

...

The network configuration options for Smart Clients are quite extensive and which configuration to choose is largely dependent on the (different) network setups between the Servoy Application Server and the machines on which Smart Clients are launched and the Servoy Application Server. What Determining the most optimal network configuration for Smart Client is, comes down to answering the following questions:

• Are some of the Can all client machines configured to access webpages through a proxyaccess the RMI port on the Servoy Application Server?
• Can the Servoy Application Server directly access the client machines on any port?
• Can all client machines access the RMI port on the Servoy Application Server on the same IP address?Can all client machines access the Servoy Application Server on the same IP address?
• Are some of the client machines configured to access webpages through a proxy?

The answers to these questions could eliminate one or more of the possible connection modes, the the matrix below:  

* See Two-Way socket under Connection Modes below

The different connection modes are discussed in detail below. 

Connection Modes

The Servoy Application Server has several modes in which Smart Clients can communicate with the Application Server. Which mode is the best depends on the network setup between the Servoy Application Server and the client machines on which the Smart Client will be launched. As the Servoy Smart Client runs over both a LAN and WAN's, including over the internet, it can be that there are different network setups for different client machines. 

• Direct ConnectionsConnection
  In Direct Connection mode Smart Clients connect to the Application Server for communication over the configured RMI port to communicate with the application Server. Vise versa, the Application Server also connects directly to the client machine on a random port to communicate with the Smart Client. 
  While being the mode with the least overhead, only this mode has limited only limited use cases. Using direct connections, all Smart Clients should be able to access the Servoy Application Server under the same IP address and access to the RMI port of the server should not be restricted. Secondly More importantly, the Servoy Application Server should also be able to connect without restrictions to any port on any client machine that will run a Smart Client. This scenario is not very likely, due to firewalls, proxies and anti-virus software.
  Direct connection mode also does not support compression and SSSSL.
• Two-Way socket
  Two-Way socket mode provides a more robust communication mechanism between Smart Clients and the Servoy Application Server, where only the Smart Client initiates connections to the Application Server over the RMI port. This means that only the Smart Clients need to be able to access the Application Server and that the Application Server does not need to be able to connect to the client machine, like is required when using direct connections.
  However Two-Way Socket connections are not possible if , in case Java WebStart on the client machine is configured to to connect through a proxy to access webpages. In that scenario the Java Web Start mechanism already initializes the communication mechanism for use with a proxy, stopping Servoy from initializing Servoy will not be able to instantiate Two-Way socket mode, and thus falling falls back to the Direct Connection mode, with the restrictions that come with Direct Connection mode. It is possible to configure Java WebStart on each client machine to not use a proxy, with it's limitations mentioned abovebut this needs to be done on each individual machine and might conflict with other Java WebStart applications that do require the proxy settings. 
• Tunnel
  Servoy comes with a so-called tunnel that Smart Clients can use to connect to Application Server. The tunnel is the most robust communication mode available, at the cost of utilization of server-side resources. For each Smart Client more memory, threads and sockets (connections) are used on the Application Server. The tunnel supports to modes, namely HTTP and Socket which can be used exclusively or mixed through the use of Profiles:
  • HTTP Tunnel
    When using the tunnel in HTTP mode, all communication between the Smart Client and the Application Server is done using the HTTP Protocol, over the HTTP port on which the Application Server runs. The benefit of this mode is that it doesn't require that the client machines can access the Application Server on the RMI port. This can be a huge benefit in cases where it's not possible to open up access to the RMI port. When Smart Clients connect to the Application Server using the HTTP Tunnel, they will utilize threads and connections from the Tomcat application server that underlies the Servoy Application Server. 
  • Socket Tunnel
    The tunnel in Socket mode is similar to the tunnel in HTTP mode, except that the communication with the Application Server goes over the RMI port of the Application Server. This means that the RMI port of the Application Server should be accessible from all client machines that will run Smart Clients. Unlike the tunnel in HTTP mode, the tunnel in Socket mode uses server-side resources (threads & sockets (connections)) directly in Servoy, not through Tomcat. 

Profiles

SSL

Tunnel:

Tunnel over HTTP:

Tunnel over socket connection:

HTTP & Socket tunnel

Profiles

----The Network Settings node on the Servoy Admin page exposes the Servoy Application Server settings that relate to network connectivity. The Network Settings node can be accessed through <serverUrl>/servoy-admin/network-settings

The Servoy Application Server provides, among others, the following services:Setting the Connection mode
All connection modes can be configured through the Servoy Admin page, under Network Settings.

• Direct Connection
  SocketFactory.useTwoWaySocket: set to false
  SocketFactory.rmiServerFactory: clear the field
  SocketFactory.useSSL: set to false
  SocketFactory.compress: set to false
• Two-Way socket
  SocketFactory.useTwoWaySocket: set to true
  SocketFactory.rmiServerFactory: clear the field
  If the fallback to direct Connection mode is required to work when clients connection with Proxy configuration in Java WebStart:
  SocketFactory.useSSL: set to false
  SocketFactory.compress: set to false
  Otherwise:
  SocketFactory.useSSL: set to true*
  SocketFactory.compress: set to true
• Tunnel
  SocketFactory.useTwoWaySocket: set to false
  SocketFactory.rmiServerFactory: set to com.servoy.j2db.server.rmi.tunnel.ServerTunnelRMISocketFactoryFactory
  SocketFactory.useSSL: set to true*
  SocketFactory.compress: set to true
  SocketFactory.tunnelConnectionMode: choose one of the three options

* See #SSL Encryption for additional settings

RMI port

With all connection modes, except the HTTP Tunnel, the Smart Clients communicate with the Servoy Application Server over the so-called RMI port. This port needs to be accessible from all the client machines at all times, thus cannot be blocked by firewalls.

Through configuration the RMI Start Port value can be set. When the Servoy Application Server is launched it tries to bind to the specified RMI Start port. If it fails to bind to this port, it will automatically try to bind to the next port. This process will continue until the binding succeeds. The RMI port number that is actually used is shown under Server Information in the Servoy Server Status on the Servoy Admin page under Servoy Server Home

The actually used RMI port should never be blocked by any firewall in between the Servoy Application Server and the client machines.

Setting the RMI port

The RMI Start port can be set through the Servoy Admin page under Network Settings > servoy.rmiStartPort. Default value is 1099 

Profiles

A Profile is a named set of settings that can be used by a Smart Client. 

Profiles are a way to allow the definition of multiple sets of configurations that can be used by Smart Clients. For more information on Profiles, see Profiles

SSL Encryption

All the communication between the Servoy Application Server and the Smart Clients can be encrypted using SSL Keys and certificates.

SSL Encryption is not supported in Direct Connection mode. When using Two-Way Socket mode and the fallback to Direct Connection mode is required to work when clients with proxy settings connect, SSL cannot be used.  

While SSL can be enabled without creating and/or purchasing an SSL certificate, this is considered insecure and should be avoided. 

Setting up SSL Encryption

Compression

Compression reduces the amount of data send back and forth between the Servoy Application Server and the Smart Clients.

Compression is not supported in Direct Connection mode. When using Two-Way Socket mode and the fallback to Direct Connection mode is required to work when clients with proxy settings connect, Compression cannot be used.

Enabling/disabling compression

The Compression setting can be administered through the Servoy Admin page, under Network Settings > SocketFactory.compress. Compression is tunred on by default

Smart Client Proxy configuration

Advanced tunnel configuration