What is the role of relay server in SAP mobile infrastructure?

[midhun_vp]

Hi,

Why we need a relay server in SAP mobile infrastructure in a company.

Is it only for security?

How it can be used for security?

If relay server is not there how we can ensure security?

Please answer the above in details.

Thanks

Midhun

[former_member10452 · Accepted solution]

Hi Midhun,

Relay server can help you to protect your middleware (SUP, Afaria, etc) from external threats. To reduce the external threat, you can keep your middleware systems in your internal network (Corporate network) but you will not be able to access them from outside network (Internet). Relay server is the component which can make those resources accessible to you from internet without exposing your internal network to internet.

Relay server consists of 2 components:

1. Relay server

2. RSOE on the middleware

Relay server is not only for your security but it's a convinient way to connect all your Mobile landscape to one single external box (In DMZ network) to allow access of your mobile devices. Also, it provides load balancing and fault tolerence as well.

If you dont want to use relay server then you can use other reverse proxies available e.g. PostFusion, Netscaler, Microsoft ARR, etc.

Regards,

Abhishek Joshi

[midhun_vp · Accepted solution]

Abhishek,

So when we are using the reverse proxies we need to open the internal ports for that is it?

And if we are using the relay server we don't want to open the internal ports am I right?

Thanks

Midhun

[former_member10452 · Accepted solution]

Hi Midhun,

For Relay Server and Port Fusion you need not have to open your internal ports to server located in DMZ network. Both of them have client part (in relay case, RSOE is the one) which will initiate connection to relay server.

But if you want to use ARR, Apache HTTP 2.2, etc other software then you would need to open your internal network server port to DMZ network machine. Because ARR, Apache HTTP 2.2, etc work like load balancing and doesn't provide persisted connection between both the server. So they act like request forwarder with some additional capabilities of header changes which will look like reverse proxy.

Regards,

Abhishek Joshi

[midhun_vp · Accepted solution]

Thank you Abhishek

[Jitendra_Kansal]

Hi Midhun,

as per my understanding,

RS is used to establish a communciation (secure) b/w SUP, afaria with the external world.

RS sits in DMZ and uses outbound port to communicate wid external world.

you would have read somewhere about RSOE, (relay server outbound enabler> an additional component of SUP) which ll be used to communicate with RS.

Regards,

Jitendra

[Former Member]

The Relay Server provides the following:

1. A common communication architecture for mobile devices communicating with MobiLink, Afaria and

iAnywhere Mobile Office servers.

2. A mechanism to enable a load-balanced and fault-tolerant environment for MobiLink, Afaria and

iAnywhere Mobile Office servers.

3. A way to help communication between mobile devices and MobiLink, Afaria and iAnywhere Mobile

Office servers in a way that integrates easily with existing corporate firewall configurations and

policies.

It is not a must but it is recommended.

Rgds,

Shobhit