Listeners are network points of entry, associated with an interface address and port number that grant access to a specific TCP or UDP service.
Listeners add extra flexibility and configurability to each AXIGEN service, as they can be used to grant differentiated access to the same services for different categories of users (e.g users within a specific domain). Moreover, listeners can be associated with a variety of rules that allow defining specific limitations for connections coming from IPs within specified IP sets.
Listeners can be defined, using various parameters corresponding to that TCP service, from the configuration file (as of type "TcpListener" OBJECT-SET) or through WebAdmin (the web configuration interface). UDP service listeners have fewer parameters associated as connection related parameters do not apply to them.
The following attributes are available for each listener:
- address - the "point of entry" address and port number
-
enable - specifies whether the listener is enabled or not (this way you won't have to delete the listener when you want to discontinue its use)
- max. number of simultaneous connections and max. number of new connections in a defined time interval (seconds/minutes/hours/days) - parameters specifying limitations for network connections accepted for this listener
- max. connections from each remote IP address and max. connections from each remote IP address in a defined time interval (seconds/minutes/hours/days) - parameters specifying limitations for network connections from the same IP address accepted for this listener
- allowed SSL versions
- certificate file
- Max. chain verification depth
- Use Ephemeral Key
- Request certificate-based authentication from client
Below you can find a scheme for a quick understanding of the Log listeners: (in this context ':' can be translated as 'of type'):
TCP service:
- 'listeners' : 'TcpListener' OBJECT-SET
- 'allowRules' : 'TcpAllowRule' OBJECT-SET
- 'denyRules' : 'IpRule' OBJECT-SET
- 'listeners' : 'IpListener' OBJECT-SET
