Sun Microsystems Portal Server 6 2005Q1, Руководство по планированию

Страница: 77 / 192

SRA Sizing
Chapter 4 Pre-Deployment Considerations 77
See the Portal Server Secure Remote Access 6 Administration Guide for more
information on the Sun Crypto Accelerator 1000 board and other accelerators.
You could use a hardware accelerator on the Netlet Proxy and Rewriter Proxy
machine and derive some performance improvement.
SRA and Sun Enterprise Midframe Line
Normally, for a production environment, you would deploy Portal Server and SRA
on separate machines. However, in the case of the Sun Enterprise™ midframe
machines, which support multiple hardware domains, you can install both Portal
Server and SRA in different domains on the same Sun Enterprise midframe
machine. The normal CPU and memory requirements that pertain to Portal Server
and SRA still apply; you would implement the requirements for each in the
separate domains.
In this type of configuration, pay attention to security issues. For example, in most
cases the Portal Server domain is located on the intranet, while the SRA domain is
in the DMZ.
NOTE
The Sun Crypto Accelerator 1000 board supports only SSL
handshakes and not symmetric key algorithms. This is not generic to
all other cryptographic accelerators. Other cryptographic
accelerators are on the market and some of them can support
symmetric key encryption. See the following URL for more
information:
http://www.zeus.com/products/zws/security/hardware.html