Sunday, 4 March 2012

securing jmx

JMX is cool. Lots of Java stuff has fantastic management beans that work really well.

Too well.

I have Apache ActiveMQ and Apache Camel running under Tomcat and anyone can fire up a jconsole and do what they like to it.

Now I need to mediate this stuff to SNMP because that's what our management tool uses. I could setup all the JMX security with ssl and certificates, but I really just want it so only my SNMP sub-agent can talk to it. Now you'd think telling the socket to just listen on the loopback interface would be easy.

It is.

-Djava.rmi.server.hostname=127.0.0.1

Finding that out took ages. I got it from here. But the usually reliable stackoverflow gives a way overcomplicated answer.

No comments:

Post a Comment