Chapter 8: Gvi/Rgvi - Tavve zoneranger User Manual

Chapter 8: GVI/RGVI

In order for the ZoneRanger to proxy management traffic to managed devices, the management traffic
generated by a management application must first be routed to the Ranger Gateway. This can be
accomplished in a variety of ways:
1. Configure the management application to direct management traffic associated with devices
located in firewall-partitioned networks to the Ranger Gateway.
2. Provide a mechanism whereby management traffic destined for devices located in firewall-
partitioned networks is intercepted by the Ranger Gateway.
The primary advantage of the latter approach is that the management application can send requests to
devices located in firewall-partitioned networks as if it was communicating with those devices directly.
The fact that the requests are intercepted and processed by the Ranger Gateway is effectively hidden
from the management application. This ability to hide the existence of the proxy from the management
application is referred to as transparent proxy. The preferred mechanisms for supporting transparent
proxy on the Ranger Gateway are the Gateway Virtual Interface (GVI) and the Remote Gateway Virtual
Interface (RGVI). These mechanisms are described in the following sections.
GVI
The GVI mechanism is used when the management application and Ranger Gateway software are
installed on the same server. The internal architecture and operation of the GVI mechanism is illustrated
in the following figure.
Figure 8-1. GVI Architecture
ZoneRanger 5.5 User's Guide 25