{"action":"created","issue":{"url":"https://api.github.com/repos/payara/Payara/issues/1670","repository_url":"https://api.github.com/repos/payara/Payara","labels_url":"https://api.github.com/repos/payara/Payara/issues/1670/labels{/name}","comments_url":"https://api.github.com/repos/payara/Payara/issues/1670/comments","events_url":"https://api.github.com/repos/payara/Payara/issues/1670/events","html_url":"https://github.com/payara/Payara/issues/1670","id":235153421,"number":1670,"title":"ENH: NAT-configuration for standalone IIOP client ","user":{"login":"Findulas","id":20240482,"avatar_url":"https://avatars3.githubusercontent.com/u/20240482?v=3","gravatar_id":"","url":"https://api.github.com/users/Findulas","html_url":"https://github.com/Findulas","followers_url":"https://api.github.com/users/Findulas/followers","following_url":"https://api.github.com/users/Findulas/following{/other_user}","gists_url":"https://api.github.com/users/Findulas/gists{/gist_id}","starred_url":"https://api.github.com/users/Findulas/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Findulas/subscriptions","organizations_url":"https://api.github.com/users/Findulas/orgs","repos_url":"https://api.github.com/users/Findulas/repos","events_url":"https://api.github.com/users/Findulas/events{/privacy}","received_events_url":"https://api.github.com/users/Findulas/received_events","type":"User","site_admin":false},"labels":[{"id":354171645,"url":"https://api.github.com/repos/payara/Payara/labels/1:Investigating","name":"1:Investigating","color":"0e8a16","default":false},{"id":354171863,"url":"https://api.github.com/repos/payara/Payara/labels/c:Question","name":"c:Question","color":"bfd4f2","default":false}],"state":"open","locked":false,"assignee":{"login":"fturizo","id":2921814,"avatar_url":"https://avatars1.githubusercontent.com/u/2921814?v=3","gravatar_id":"","url":"https://api.github.com/users/fturizo","html_url":"https://github.com/fturizo","followers_url":"https://api.github.com/users/fturizo/followers","following_url":"https://api.github.com/users/fturizo/following{/other_user}","gists_url":"https://api.github.com/users/fturizo/gists{/gist_id}","starred_url":"https://api.github.com/users/fturizo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fturizo/subscriptions","organizations_url":"https://api.github.com/users/fturizo/orgs","repos_url":"https://api.github.com/users/fturizo/repos","events_url":"https://api.github.com/users/fturizo/events{/privacy}","received_events_url":"https://api.github.com/users/fturizo/received_events","type":"User","site_admin":false},"assignees":[{"login":"fturizo","id":2921814,"avatar_url":"https://avatars1.githubusercontent.com/u/2921814?v=3","gravatar_id":"","url":"https://api.github.com/users/fturizo","html_url":"https://github.com/fturizo","followers_url":"https://api.github.com/users/fturizo/followers","following_url":"https://api.github.com/users/fturizo/following{/other_user}","gists_url":"https://api.github.com/users/fturizo/gists{/gist_id}","starred_url":"https://api.github.com/users/fturizo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fturizo/subscriptions","organizations_url":"https://api.github.com/users/fturizo/orgs","repos_url":"https://api.github.com/users/fturizo/repos","events_url":"https://api.github.com/users/fturizo/events{/privacy}","received_events_url":"https://api.github.com/users/fturizo/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2017-06-12T08:08:02Z","updated_at":"2017-06-30T01:03:14Z","closed_at":null,"body":"# Description #\r\n----------\r\n\r\nWe need to connect to a payara server behind a clientside firewall with static nat. The server configuration cannot/should not be changed. So there should be a configuration for a standalone client to nat the via GIOP transfered address.\r\n\r\n## Expected Outcome\r\n\r\nThe network is set up with a firewall doing a static nat:\r\n\r\nstandalone client <-vpn-> firewall (nat) <-lan-> payara\r\n\r\nMost of the clients connect to the payara server from inside the lan. So the server configuration should not be changed for the vpn clients.\r\n\r\nA solution would be to configure an NAT for the transmitted addresses inside the iiop client of the standalone application. This translation needs to match those on the firewall. This way clients behind a natting firewall can connect to the server without any changes made to the server configuration\r\n\r\n## Current Outcome\r\n\r\nThis solution would only match static nats.\r\n\r\n## Environment ##\r\n\r\n- **Payara Version**: 4.1.1.171\r\n- **Edition**: Full\r\n- **JDK Version**: 8 u131 - OpenJDK\r\n- **Operating System**: Windows\r\n- **Database**: PostGres\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/payara/Payara/issues/comments/312147186","html_url":"https://github.com/payara/Payara/issues/1670#issuecomment-312147186","issue_url":"https://api.github.com/repos/payara/Payara/issues/1670","id":312147186,"user":{"login":"fturizo","id":2921814,"avatar_url":"https://avatars1.githubusercontent.com/u/2921814?v=3","gravatar_id":"","url":"https://api.github.com/users/fturizo","html_url":"https://github.com/fturizo","followers_url":"https://api.github.com/users/fturizo/followers","following_url":"https://api.github.com/users/fturizo/following{/other_user}","gists_url":"https://api.github.com/users/fturizo/gists{/gist_id}","starred_url":"https://api.github.com/users/fturizo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fturizo/subscriptions","organizations_url":"https://api.github.com/users/fturizo/orgs","repos_url":"https://api.github.com/users/fturizo/repos","events_url":"https://api.github.com/users/fturizo/events{/privacy}","received_events_url":"https://api.github.com/users/fturizo/received_events","type":"User","site_admin":false},"created_at":"2017-06-30T01:03:14Z","updated_at":"2017-06-30T01:03:14Z","body":"Greetings @Findulas,  Indeed as you mention remote EJB communication on Payara Server struggles at locating remote EJBs due to the way the GIOP communication packets handle the server's address when going through a NAT or a VPN. I've opened the JIRA Issue `PAYARA-1811` so the developers can give me input if this scenario is workable and the effort to do it is manageable. I'll come back to you once I have more information."}}
{"actor":{"display_login":"fturizo"}}