IPv6 Certified with Oracle E-Business Suite

With the proliferation of web-enabled devices, it's not surprising to hear concerns about the dwindling pool of IP addresses.  The Internet Engineering Task Force (IETF) has proposed a solution to this problem.  From their IPv6 Information page:

IPv6 is the "next generation" protocol designed by the IETF to replace the current version Internet Protocol, IP Version 4 ("IPv4").

Most of today's internet uses IPv4, which is now nearly twenty years old. IPv4 has been remarkably resilient in spite of its age, but it is beginning to have problems. Most importantly, there is a growing shortage of IPv4 addresses, which are needed by all new machines added to the Internet.

IPv6 fixes a number of problems in IPv4, such as the limited number of available IPv4 addresses. It also adds many improvements to IPv4 in areas such as routing and network autoconfiguration. IPv6 is expected to gradually replace IPv4, with the two coexisting for a number of years during a transition period.

IPv6 Reverse Proxies for E-Business Suite Instances

Oracle E-Business Suite Releases 11i and 12 have now been certified to be IPv6-compliant, providing IPv6 support via an IPv6 to IPv4 reverse proxy architecture.

IPv6 Reverse Proxy: Diagram showing IPv6 to IPv4 reverse proxy architecture for the E-Business Suite

In this reverse proxy architecture:
  • IPv6 traffic outside the E-Business Suite installation stops at the reverse proxy.
  • Traffic inside the E-Business Suite data installation, behind the reverse proxy, is transmitted via IPv4.
This architecture requires the E-Business Suite installation to support IPv4 or "mixed-mode" traffic.

Prerequisites

E-Business Suite Release 11i:
  • 11.5.10 Consolidated Update 1 or 2
  • TXK (FND & ADX) AutoConfig Rollup Patch O (December 2006) or later
  • AutoConfig Template Rollup (TXK) M or later
  • Desktop clients running the Sun Java Runtime Engine (JRE) Plug-In
  • Client/Server Modules served from an IPv6-compliant desktop server
E-Business Suite Release 12
  • Desktop clients running the Sun Java Runtime Engine (JRE) Plug-In
References

Implementation steps for enabling an IPv6 reverse proxy in your environment will vary depending on what you use for a web listener.  We've documented a set of implementation steps for an example architecture that uses a Linux-based Oracle HTTP Server (based on Apache 2.0) reverse proxy.  For details, see:

Comments:

We have Solaris based Sun servers with Oracle eBiz suite R12.0.4 (which is likely to get upgraded to 12.1.3).

Is there any requirement of IPv6 reverse proxy? If so why and what are the implementation steps?

Posted by NANDEESH H N on February 27, 2011 at 12:33 PM PST #

When will the equipment be dual-stack enabled so this add-on equipment (reverse proxy architecture) can be eliminated? Why would I want to purchase extra hardware?

Posted by guest on June 02, 2011 at 01:18 AM PDT #

Nandeesh: Sorry for the delay in responding to your question. It appears to have gotten lost in our backlog. You will require an IPv4-to-IPv6 reverse proxy only if you're running an IPv6-only network internally. If you're running a dual-stack network, then no reverse proxy is required. Regards, Steven

Posted by Steven Chan on June 02, 2011 at 03:18 AM PDT #

Steve,

Since we are currently using R12 (12.1.3), do we need a separate server for running IPv6 reverse-proxy? If so, can use any web server such as IIS, etc as a standalone HTTP server?

Thanks for your help.

- Ramasamy

Posted by Ramasamy on February 13, 2012 at 08:33 AM PST #

Steve,

To clarify further, we are currently running on a Single Node Architecture (but no DMZ) on AIX with R12 (12.1.3). Per MetaLink Note: 567015.1, there is no pre-req for R12... So, my question is:

Do we really need a separate reverse-proxy server for IPv6? If so, can it run on the same server where R12 is running? Also, can we use any web server such as IIS, etc as a standalone HTTP server?

Thanks for your help...

- Ramasamy

Posted by Ramasamy on February 13, 2012 at 09:10 AM PST #

Ramasamy,

For maximum security, we generally advise proxy servers to be hosted on standalone machines, separated from the inner application tier servers by a firewall. This follows the "defense in depth" principle. If the proxy server is compromised in some way, the physical separation and intervening firewall will still provide a degree of protection for your E-Business Suite environment.

That said, a reverse proxy server can run on the same physical server that's used for the E-Business Suite services. You will need to ensure that there's sufficient capacity (RAM, CPU) on that physical server to handle the proxy server's requirements.

Regards,
Steven

Posted by Steven Chan on February 13, 2012 at 11:41 AM PST #

Steven,

Thanks. So, even in R12 (12.1.3), we need a reverse proxy server.

Also, could you please confirm whether we can use any web server such as IIS, etc as a reverse proxy server instead of an Oracle HTTP server?

Regards,
Ramasamy

Posted by Ramasamy on February 14, 2012 at 05:56 AM PST #

Ramasamy,

We've certified Oracle HTTP Server as reverse proxy servers in E-Business Suite environments. We haven't tested any third-party proxy servers. I'd expect that any standards-compliant server would work fine.

Regards,
Steven

Posted by Steven Chan on February 14, 2012 at 03:32 PM PST #

Hi,

Can we configure OHS 11g to act as reverse proxy for EBS's older versions.
If yes can you please provide me some reference for the same where this integration is explained

Regards
Abhinav

Posted by guest on August 14, 2012 at 06:39 AM PDT #

Hi, Abhinav,

You can find generic installation instructions for Oracle HTTP Server 11g here:

http://www.oracle.com/technetwork/middleware/ias/index-091236.html

You can refer to the Note listed in the article above for instructions for configuring your E-Business Suite environment to use that as a proxy.

Regards,
Steven

Posted by Steven Chan on August 22, 2012 at 12:30 PM PDT #

Steve,

We are running a Single Node EBS R12.1.3. We have some interfaces using ODBC, TNSNAMES and DB Links to get/send data from/to other systems/servers. Also we have some ftp/sftp processes through Concurrent Managers to send the data/files to other servers.

Now, if we want to implement IPv6 using Reverse Proxy (Doc id: 567015.1), how to resolve the following scenerios:

1. Since the Concurrent Managers are running in IPv4 Configuration (Database, Web, Tools and Admin Server are all running in a single server in IPv4), how the ftp/sftp processes will use IPv6 configuration to send/transfer the data?

2. Does this configuration (Standalone HTTP Server) will also solve our other interfaces using ODBC, TNSNAMES and Database Links to get/send information from/to other IPv6 systems?

An early reply is highly appreciated.

Thanks
Ramasamy

Posted by Ramasamy Narayanasamy on May 02, 2013 at 10:52 AM PDT #

Steve,

Also, since R12.2 will be released soon (may be end of this year) and it has all the latest technology stack (such as WLS, HTTP Server 11g, etc), any idea whether the new release R12.2 will have a native IPv6 compliance Or do we have to follow the same Reverse Proxy configuration in R12.2 also?

Thanks
Ramasamy

Posted by Ramasamy Narayanasamy on May 02, 2013 at 11:00 AM PDT #

Ramasamy,

EBS 12.2 is expected to continue to require the IPv4-to-IPv6 reverse proxy architecture at least initially. I'll publish more details about this when we get closer to the 12.2 release date.

In the meantime, I see that you're with a US Federal agency. Can you drop me a private email with more details about your agency's plans for IPv6 implementation?

Regards,
Steven

Posted by Steven Chan on May 03, 2013 at 07:28 AM PDT #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
4
5
6
7
8
9
10
11
12
13
14
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today