JSL Command-line Options

The server may need to obtain information from the command line. The CLOPT parameter allows you to specify command-line options that can change some defaults in the server. The JSL command-line options are described in the following table.

Table 3-1 JSL Command-line Options

Option Description
[-a] Enables or disables the security context for a Jolt connection pool. This option should be enabled if you want to implement authentication propagation between WebLogic Server and Jolt. If identity propagation is desired, then the Jolt Service Handler (JSH) must be started with this option. If the -a option is not set, but SecurityContext is enabled, the JSH will not accept this request. If the SecurityContext attribute is enabled, then the Jolt client will pass the username of the caller to the JSH.

If the JSH, gets a message with the caller’s identity, it calls impersonate_user() to get the appkey for the user. JSH caches the appkey, so the next time the caller makes a request, the appkey is retrieved from the cache and the request is forwarded to the service. A cache is maintained by each JSH, which means that there will be a cache maintained for all the session pools connected to the same JSH.

[-A] Specifies that certificate-based authentication should be required when accepting an SSL connection from a remote application.

Note:

The JSL -A option is equivalent to the ISL(5) and WSL(5) -a option. For more information see, Section 5 - File Formats, Data Descriptions, MIBs, and System Processes Reference.
[-c compression_threshold] Enables application data sent between a Jolt client and a Jolt server (JSH) to be compressed during transmission over the network.

compression_threshold is a number that you specify between 0 and 2,147,483,647 bytes. Any messages that are larger than the specified compression threshold are compressed before transmission.

The default is no compression; that is, if no compression threshold is specified, Oracle Jolt does not compress messages on client or server.

[-d device_name] The device for platforms using the Transport Layer Interface. There is no default. Required. (Optional for sockets)
[-H external netaddr] Specifies the network address mask Jolt clients use to connect to the application when there is network address translation. The JSL process uses this address to listen for clients attempting to connect at this address. If the external address mask is 0x0002MMMMdddddddd and the JSH network address is 0x00021111ffffffff, the known (or external) network address is 0x00021111dddddddd. If the address starts with "//" network address, the type is IP based and the TCP/IP port number of the JSH network address is copied into the address to form the combined network address.

The external IP address mask must be specified in the following form: -H //external ip address:MMMM

(Optional for JSL in Oracle Tuxedo )

Note:

The option does not support IPv6.
[-I init-timeout] The time (in seconds) that a Jolt client is allowed to complete initialization through the JSH before it is timed out by the JSL. Default is 60 seconds. (Optional)
[-j connection_mode] The following connection modes from clients are allowed:
RETAINED
The network connection is retained for the full duration of a session.
RECONNECT
The client establishes and brings down a connection when an idle timeout is reached, reconnecting for multiple requests within a session.
ANY
The server allows a client to request either a RETAINED or RECONNECT type of connection for a session.

The default is ANY. That is, if no option is specified, the server allows a client to request either a RETAINED or RECONNECT type of connection. (Optional)

[-K {client | handler | both | none}] The -K option turns on the network keep-alive feature for the client, the handler, or both. You can turn off this option for both the client and handler by specifying none.
[-m minh] The minimum number of JSHs that are available in conjunction with the JSL at one time. The range of this parameter is from 0 through 255. Default is 0. (Optional)
[-M maxh] The maximum number of JSHs that are available in conjunction with the JSL at one time. If this option is not specified, the parameter defaults to the MAXWSCLIENTS divided by the -x multiplexing factor (MPX), with the result rounded up. If specified, the -M option takes a value from 1 to 32,767. (Optional)
[-n netaddr] Network address used by the Oracle Jolt listener with Oracle Tuxedo , and WebLogic Server.

TCP/IP addresses may be specified in the following formats:

  • IPv4

    //IP:port

    //hostname:port_number

    //#.#.#.#:port_number

    The domain finds an address for hostname by using the local name resolution facilities (usually DNS). hostname must be the local machine, and the local name resolution facilities must unambiguously resolve hostname to the address of the local machine

    The “#.#.#.#” is in dotted decimal format. In dotted decimal format, each # should be a number from 0 to 255. This dotted decimal number represents the IP address of the local machine. In both of the above formats, port_number is the TCP port number at which the domain process listens for incoming requests. port_number can either be a number between 0 and 65535 or a name.

  • IPv6

    //[IPv6 address]:port

    //hostname:port_number

    Note:

    IPv6 does not support hexadecimal format.
  • SDP

    sdp://IB_IP:port

[-R renegotiation-interval] Specifies the renegotiation interval in minutes. After the specified number of minutes have elapsed without renegotiation of the SSL encryption parameters for a particular SSL session, the SSL encryption parameters will be renegotiated on the next exchange of data, as described in the SSL and TLS standards. The default is 0 minutes which results in no periodic session renegotiation.

Note:

If the -R parameter is specified and the -S parameter is not specified or set to 0, the JSL sends a warning message to the userlog.
[-S Client-timeout] The idle time (in minutes) when the client does not have any outstanding requests. In other words, when the client is “snoozing.”

This option can be used together with the -T option. When either timeout reached, JSH will close the session.

If a parameter is not specified, the default is no timeout. (Optional)

[-s secure-port] Specifies the port number that the JSL should use to listen for secure connections using the SSL protocol. You can configure the JSL to allow only secure connections by setting the port numbers specified by the -s and options to the same value.

This option cannot be used if the JRLY and JRAD processes are used.

The JSL -s option is equivalent to the ISL(5) and WSL(5) -S option. For more information see, Section 5 - File Formats, Data Descriptions, MIBs, and System Processes Reference.

[-T Client-timeout] The time (in minutes) allowed for a client to stay idle. If a client does not make any requests during this time, the JSH disconnects the client and the session is terminated. If an argument is not supplied, the session does not timeout.

When the -j ANY or -j RECONNECT option is used, always specify -T with an idle timeout value. If -T is not specified and the connection is suspended, JSH does not automatically terminate the session. The session never terminates if a client abnormally ends the session.

If a parameter is not specified, the default is no timeout. (Optional)

[-w JSH] This command-line option indicates the Jolt Server Handler. Default is JSH. (Optional)
[-x mpx-factor] This is the number of clients that one JSH can service. Use this parameter to control the degree of multiplexing within each JSH process. If specified, this parameter takes a value from 1 to 32767 for UNIX and Windows 2003. Default value is 10. (Optional)
[-z 0|56|128|256] Specifies the minimum level of encryption when establishing a network connection between a Jolt client and the JSH. 0 means no encryption while 56, 128, and 256 specify the length (in bits) of the encryption key. If this minimum level of encryption cannot be met, a connection will not be established.
[-Z 0|56|128|256] When a network link between a Jolt client and the JSH is being established, this option allows encryption up to the specified level. The initial 0 means no DH nodes, no RC4. The numbers 56, 128, and 256 specify the length (in bits) of the encryption key. Either SSL or the DH key exchange is needed to generate keys. Session keys are not transmitted over the network. The default value is 0.

Note:

A 0-bit maximum encryption level is not compatible with the -s SSL connection option.