AXIGEN Webmail Proxy is an AXIGEN service (somewhat similar in functionality and configuration with the IMAP Proxy and POP3 Proxy services) that allows connection proxying from the frontend layer to the backend layer in a clustered environment.

Listeners

Listeners can be defined and managed to add extra flexibility and configurability to this service. For that, global access limitations, SSL Settings and access lists can be enforced on the address used by this service for binding.

Access Control

Access rules allow you to control connection to this service by defining simple access lists for specific Networks / IP Ranges / IP’s. Service level access rules are automatically applied to all its listeners and will override for this service any existing Global Access rules.

Flow Control

Flow control parameters can be adjusted to fine tune the server’s performance and avoid overloading it. Global access limitations to this listener can be enforced by setting the total number of simultaneous connections, concurrent connections from each remote IP address, number of new connections to the listener made in a time period interval, number of total connections from each remote IP address on a time interval period. The default interval for this time period is set to 1 minute.

Logging

All AXIGEN main services can log different types of events. The system administrator can specify what events are logged, where and how they are logged.

See Logging service for more details on logging in AXIGEN.

Encryption and Authentication

When the user performs the login post, from the login page, the Webmail proxy picks up the username and password and performs either of the following steps:

• Proxy authentication

If proxy authentication is selected, the proxy attempts to verify the credentials through LDAP Password or LDAP Bind. If authentication fails, the login page is presented again, with the username filled-in with the same value as the user input and a message informing the user that the authentication has failed. After re-typing the password the user may request login again and the process is resumed.

• Back-end authentication

If proxy authentication is disabled, the proxy looks-up the user in LDAP, identifies the back-end AXIGEN node, performs the authentication request and, if the authentication is successful on the backend, provides the client with the session token and redirects it to the Inbox.

HTTP Protocol Options

WebMail allows you to set HTTP limits for any request made to the Webmail Proxy service. This prevents automatically accepting excessive amounts of data (HTTP headers, HTTP body and upload data).

Instruct the WebMail service to start device detection, if a 'mobile' device is detected the mobile WebMail interface will be displayed instead of the regular interface.

Webmail Proxy Options

The maximum number of pending requests to each back-end can be controlled by defining the request queue size. If, for a specific back-end, a new request is incoming and the queue is at its maximum size, the "503 Service Unavailable" error is immediately returned.

Virtual Host WebMail Templates

The WebMail service can be configured so that each virtual host (determined by URL) is associated with a certain HSP template. All available templates are placed in a specific directory.

Thread Management

AXIGEN Mail Server is designed to run on different machine configurations and operating systems, on networks with various traffic loads, structures, domain configurations, user rights etc. That is why, depending on all these variables, you can adapt the workload to the server’s processing power to improve its performance or avoid overload by setting the minimum and maximum number of threads that can be opened at a specific moment of time.

Back-end Server Connection Settings

In this section, you can allow a connection timeout to be set, specify the maximum number of parallel requests that can be performed on the back-end server, another local network interface IP address to be used for connections with the back-end server and whether or not to use SSL to connect to the back-end server.

For more details on how to configure Webmail Proxy parameters using WebAdmin see Webmail Proxy Tab.