Solved

Wht not to use JAVA-RMI over the Internet ?

Posted on 2004-10-06
6
405 Views
Last Modified: 2012-06-27
I have been wondering about this:

JAVA RMI is a very good techonology, created for Distributed Systems, but why some people out there say that it is not advisable to use it over the Internet ?

How about firewalls, do they all allo you to use RMI ?

Why shouldn't I use RMI in my Distributed appl. over the Internet ? or perhaps, why should I use it ?
0
Comment
Question by:probine
6 Comments
 
LVL 11

Expert Comment

by:cjjclifford
ID: 12236738
personally I'd say the insecure nature would be the main reason, as well as various firewall issues... you could look at combining SSL and RMI, or even Tunnelled SSL and RMI might work... I've never had to work on clients outside corporate LAN (with RMI that is...)

Cheers,
C.
0
 
LVL 7

Accepted Solution

by:
tomboshell earned 20 total points
ID: 12237406
Security, overhead, possible overkill.  Most people find that they can simply implement a system where the different components simply send short messages (often in xml) rather than the more complicated rmi.  


but anyways
http://www.javacoding.net/articles/technical/rmi-firewall.html
0
 
LVL 7

Expert Comment

by:bvanderveen
ID: 12238253
You can set a security manager for RMI to solve most security issues (limiting to certain clients, JVM restrictions, signed code only, directory restrictions, etc.).  But, RMI is usually overkill, and using some messaging is often preferable to having an application execute remote code directly.
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 
LVL 11

Expert Comment

by:cjjclifford
ID: 12238353
the lack of security I was describing was mainly in the plain text nature...
but, yes, the messaging mechanism does sound like a better approach - RMI will presumably keep sockets, etc, for the lifetime of the connect, etc.
0
 

Author Comment

by:probine
ID: 12246448
Should I use then TCP/IP ?
I want to make a simple client - server chat appl.

Suggestios ?
0
 
LVL 11

Expert Comment

by:cjjclifford
ID: 12246483
probably the easiest would be to use JSP webpage, and use a <form> to POST the chat lines - refreshing the client side periodically - this way means that no client specific code is required, just a web-browser...
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

After being asked a question last year, I went into one of my moods where I did some research and code just for the fun and learning of it all.  Subsequently, from this journey, I put together this article on "Range Searching Using Visual Basic.NET …
Java had always been an easily readable and understandable language.  Some relatively recent changes in the language seem to be changing this pretty fast, and anyone that had not seen any Java code for the last 5 years will possibly have issues unde…
Video by: Michael
Viewers learn about how to reduce the potential repetitiveness of coding in main by developing methods to perform specific tasks for their program. Additionally, objects are introduced for the purpose of learning how to call methods in Java. Define …
This tutorial will introduce the viewer to VisualVM for the Java platform application. This video explains an example program and covers the Overview, Monitor, and Heap Dump tabs.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now