Glacier2.*

Glacier2.AddConnectionContext=num

Controls the connection information that Glacier2 adds to the request context:

For values 1 and 2, Glacier2 supplies the following entries when the connection provides the corresponding information:

The address and port entries apply to IP-based transports, including TCP, SSL, WS and WSS. Glacier2 removes client-supplied values for the keys listed above from session-creation requests before calling the verifier or session manager.

Glacier2.Client.AdapterProperty=value

Glacier2 uses the adapter name Glacier2.Client for the object adapter that it provides to clients.

This adapter must be accessible to clients of Glacier2. Use of a secure transport for this adapter is highly recommended.

The router requires Glacier2.Client.Endpoints to start. IANA has assigned the port numbers 4063 (TCP) and 4064 (SSL) to Glacier2.

Glacier2.Client.Connection.InactivityTimeout defaults to 0. The client adapter's connection idle timeout, Glacier2.Client.Connection.IdleTimeout, supplies the value returned by Glacier2::Router::getSessionTimeout; it defaults to Ice.Connection.Server.IdleTimeout.

Glacier2.Client.ForwardContext=num

If num is set to a value larger than 0, the Glacier2 router includes the request context when forwarding requests from clients to servers. The default value is 0.

When Glacier2.AddConnectionContext is 1, Glacier2 includes its connection-information context even if Glacier2.Client.ForwardContext is 0.

Glacier2.Client.Trace.Reject=num

Controls tracing for the router's filters:

Glacier2.Client.Trace.Request=num

If num is set to a value larger than 0, the Glacier2 router logs a trace message for each request that is forwarded from a client. The default value is 0.

Glacier2.CryptPasswords=file

Specifies the path of the router's password file. The router uses this file to verify the user name and password that a client provides when it creates a session. Each non-blank line contains a user name and a password hash, separated by whitespace. User names must be unique. The supported hash formats depend on the platform; see Writing a Password File.

This property is ignored if Glacier2.PermissionsVerifier is defined.

Glacier2.Filter.AdapterId.Accept=list

Specifies a space-separated list of adapter IDs. The Glacier2 router's adapter ID filter accepts a request when the adapter ID of the target proxy matches one of the entries in this list.

Identifiers that contain spaces must be enclosed in single or double quotes. Single or double quotes that appear within an identifier must be escaped with a leading backslash.

Glacier2.Filter.Address.Accept=list

Specifies a space-separated list of address-port pairs. When defined, the Glacier2 router filters requests so that it only allows requests to Ice objects through direct proxies whose endpoints all match the same address-port pair in this list. If not defined, this property imposes no address restriction. Requests accepted by this property may be rejected by the Glacier2.Filter.Address.Reject property.

Each pair is of the form address or address:port. The address portion can include wildcards ('*'). Port selection can be individual, value ranges, or groups. Ranges and groups have the form [value1,value2,value3,...] and/or [value1-value2]. If the port section is unspecified then all ports will be permitted.

Host matching is case-insensitive and ignores a trailing dot on a DNS name. When either address filter is set, Glacier2 rejects proxies containing a non-IP or unknown transport, an empty host, a host longer than 255 bytes, a host containing spaces or control characters, or an IPv4 address with a non-canonical spelling or a trailing dot.

Glacier2.Filter.Address.Reject=list

Specifies a space-separated list of address-port pairs. When defined, the Glacier2 router rejects requests to Ice objects through proxies with any endpoint matching any address-port pair in this list. If not set, the Glacier2 router allows requests to any network address unless the Glacier2.Filter.Address.Accept property is set, in which case requests will be accepted or rejected based on the Glacier2.Filter.Address.Accept property. If both the Glacier2.Filter.Address.Accept and Glacier2.Filter.Address.Reject properties are defined, the Glacier2.Filter.Address.Reject property takes precedence.

Each pair is of the form address or address:port. The address portion can include wildcards ('*'). Port selection can be individual, value ranges, or groups. Ranges and groups have the form [value1,value2,value3,...] and/or [value1-value2]. If the port section is unspecified then all ports will be rejected.

The host restrictions described for Glacier2.Filter.Address.Accept also apply here.

Glacier2.Filter.Category.Accept=list

Specifies a space-separated list of identity categories. The Glacier2 router's category filter accepts a request when the category of the target identity matches one of the categories in this list. If Glacier2.Filter.Category.AcceptUser is defined with a non-zero value, the router automatically adds the non-empty user name of each session created with createSession to this list.

Categories that contain spaces must be enclosed in single or double quotes. Single or double quotes that appear within a category must be escaped with a leading backslash.

Glacier2.Filter.Category.AcceptUser=num

Specifies whether to add an authenticated user ID to the Glacier2.Filter.Category.Accept property when creating a new session. The legal values are shown below:

Glacier2.Filter.Identity.Accept=list

Specifies a space-separated list of identities. The Glacier2 router's identity filter accepts a request when the target identity matches one of the entries in this list.

Identities that contain spaces must be enclosed in single or double quotes. Single or double quotes that appear within an identity must be escaped with a leading backslash.

Glacier2.Filter.ProxySizeMax=num

If num is greater than 0, the Glacier2 router rejects requests whose stringified proxies are longer than num bytes. The default value is 0, which imposes no proxy-size limit.

Glacier2.InstanceName=name

Specifies the identity category for the Glacier2 router and its null permissions verifiers: name/router, name/NullPermissionsVerifier and name/NullSSLPermissionsVerifier. Glacier2 also uses this value as the router name in its metrics.

The default value is Glacier2.

Glacier2.PermissionsVerifier=proxy

Specifies the proxy of an object that implements the Glacier2::PermissionsVerifier interface for controlling access to Glacier2 sessions. The router invokes this proxy to validate the user name and password of each new session. Glacier2 uses the object specified in Glacier2.SSLPermissionsVerifier when the client calls createSessionFromSecureConnection. For simple configurations, you can specify the name of a password file using Glacier2.CryptPasswords.

Glacier2 supplies a "null" permissions verifier object that accepts any username and password combination for situations in which no authentication is necessary. To enable this verifier, set the property value to instance/NullPermissionsVerifier, where instance is the value of Glacier2.InstanceName.

As a proxy property, you can configure additional aspects of the proxy using properties.

The router requires a permissions verifier configured with Glacier2.PermissionsVerifier, Glacier2.SSLPermissionsVerifier or Glacier2.CryptPasswords.

Glacier2.RoutingTable.MaxSize=num

This property sets the size of the router's routing table to num entries. If more proxies are added to the table than this value, proxies are evicted from the table on a least-recently used basis.

Clients automatically retry operation calls on evicted proxies and transparently re-add such proxies to the table.

The default size of the routing table is 1000.

Glacier2.Server.AdapterProperty=value

Glacier2 uses the adapter name Glacier2.Server for the object adapter that it provides to servers.

Glacier2 creates this adapter only when Glacier2.Server.Endpoints is set. The adapter provides access to the SessionControl interface and must be accessible to servers that call back to router clients. Without this adapter, Glacier2 passes a null SessionControl proxy to session managers.

Glacier2.Server.ForwardContext=num

If num is set to a value larger than 0, the Glacier2 router includes the request context when forwarding requests from servers to clients. The default value is 0.

Glacier2.Server.Trace.Request=num

If num is set to a value larger than 0, the Glacier2 router logs a trace message for each request that is forwarded from a server. The default value is 0.

Glacier2.SessionManager=proxy

Specifies the proxy of an object that implements the Glacier2::SessionManager interface. The router invokes this proxy to create a new session for a client, but only after the router validates the client's user name and password.

As a proxy property, you can configure additional aspects of the proxy using properties.

Glacier2 always disables connection caching for this proxy. Its locator cache timeout defaults to 600 seconds instead of Ice.Default.LocatorCacheTimeout.

Glacier2.SSLPermissionsVerifier=proxy

Specifies the proxy of an object that implements the Glacier2::SSLPermissionsVerifier interface for controlling access to Glacier2 sessions. The router invokes this proxy to verify the credentials of clients that attempt to create a session from a secure connection. Sessions created with a user name and password are verified by the object specified in Glacier2.PermissionsVerifier.

Glacier2 supplies a "null" permissions verifier object that accepts the credentials of any client for situations in which no authentication is necessary. To enable this verifier, set the property value to instance/NullSSLPermissionsVerifier, where instance is the value of Glacier2.InstanceName.

As a proxy property, you can configure additional aspects of the proxy using properties.

Glacier2.SSLSessionManager=proxy

Specifies the proxy of an object that implements the Glacier2::SSLSessionManager interface for managing sessions. The router invokes this proxy to create a new session for a client that has called createSessionFromSecureConnection.

As a proxy property, you can configure additional aspects of the proxy using properties.

Glacier2 always disables connection caching for this proxy. Its locator cache timeout defaults to 600 seconds instead of Ice.Default.LocatorCacheTimeout.

Glacier2.Trace.RoutingTable=num

The routing table trace level:

Glacier2.Trace.Session=num

If num is set to a value larger than 0, the Glacier2 router logs trace messages about session-related activities. The default value is 0.