Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



Reply
LinkBack Thread Tools Display Modes
KB19236 - Recommended configuration for SRP connections through a proxy
 
  #1 (permalink)  
Old 08-16-2009, 07:52 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,257
Blog Entries: 147
Default KB19236 - Recommended configuration for SRP connections through a proxy

Environment

  • BlackBerry® Enterprise Server versions 4.0, 4.1 and 5.0
  • Proxy server



Overview

The current BlackBerry® Infrastructure for Server Routing Protocol (SRP) connections is configured such that there are two different sites in North America, each with its own Internet Protocol (IP) address. Both IP addresses are returned in a round robin of Domain Name System (DNS). Under certain fail over conditions one node may be up if the other is down. Each IP may, also, still be routed to its respective site, while DNS still presents the IP addresses of both sites. To work with this model, the BlackBerry Enterprise Server is designed such that it can be aware of the multiple SRP sites. If a connection to one site fails, the BlackBerry Enterprise Server is designed to try the next site.
If the BlackBerry Enterprise Server connects to the BlackBerry Infrastructure through a proxy by specifying the proxy name in the BlackBerry Router configuration tab and configures the proxy forward to the DNS name of the BlackBerry infrastructure (srp.na.blackberry.net, srp.us.blackberry.net), the BlackBerry Enterprise Server will not be aware of both BlackBerry Infrastructure sites. Because the BlackBerry Enterprise Server will not have awareness of both Infrastructure sites, connecting the SRP to the 'up' site will be limited to the function of round robin DNS. Therefore, an extended outage of BlackBerry services may be observed and fail over will be dependant on which order the proxy receives the hosts from DNS.



Cause

In the above configuration, the BlackBerry Enterprise Server will be aware of a successful or failed SRP connection and continue accordingly; however, the BlackBerry Enterprise Server will not have any awareness of multiple SRP hosts and it will be limited by DNS.



Resolution

Configuration Option 1

  1. Create two A records with very low Time to Live (approximately 10 seconds or so) on the same name on the DNS server (in your local domain) used by the proxy. Resolve these to the current IPs of the SRP infrastructure. Example:
    Using nslookup of srp.us.blackberry.net, you can see IP addresses of 206.51.26.33 and 204.187.87.33
    In the domain local create:
    srp IN A 206.51.26.33
    srp IN A 204.187.87.33
  2. Alter the forwarding rules on the proxy to direct traffic to this DNS name.

Configuration Option 2

  1. Configure the proxy such that there are two IP entry points (apply this to two physically different proxies, or virtual hosts).
  2. Configure internal DNS (accessible to the BlackBerry Enterprise Server) with two A records and low Time to Live (approximately 10 seconds or so) that resolve one name to both IP entry points of the proxy.
  3. Configure the proxy such that connections to IP entry point 1 are forwarded to 206.51.26.33 on Transmission Control Protocol (TCP) port 3101.
  4. Configure the proxy such that connections to IP entry point 2 are forwarded to 204.187.87.33 on TCP port 3101.
  5. Configure the BlackBerry Router to connect to the DNS name created in step 2 by opening the BlackBerry Server Configuration tool, select the BlackBerry Router tab, type the DNS name created under the SRP address. Note: Creating proxy forwards using forwarding mode instead, of using proxy mode (non-transparent) integrates better with the BlackBerry Enterprise Server and SRP infrastructure connection.



Additional Information

For more information on firewall and connection requirements for the BlackBerry Enterprise Server, see KB03735.
__________________
http://blog.port3101.org/hdawg/
Reply With Quote
Sponsored Links
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
KB19504 - SMS devices recommended for BlackBerry Monitoring Service hdawg Featured BlackBerry KB Articles 0 09-14-2009 09:43 PM
KB04557 - Recommended Microsoft Active Directory groups for the Windows account hdawg Featured BlackBerry KB Articles 0 05-25-2009 08:30 PM
KB15181 - Import IT policy rules for the BlackBerry Client for IBM Lotus Connections Si Featured BlackBerry KB Articles 0 03-27-2009 04:18 AM


All times are GMT -4. The time now is 11:46 AM.
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2018, vBulletin Solutions, Inc.


 

SEO by vBSEO 3.3.2 PL2