Table of Contents
Advertisement
14.2.1 General
For the environments discussed in
configure SSL options differs with iFolder versions. iFolder 3.6 does not support SSL
communication, so you must use it only in a trusted environment. Novell iFolder 3.7 and later
versions do support SSL.
Table 14-1
Environment
Trusted
Untrusted
In addition to SSL, specifying the public URL is a must in an untrusted environment. Instead of an
IP address, set the public URL to the DNS name of the server so that the client uses the DNS name
to connect to the server. When the iFolder client uses the DNS name, even if the iFolder client has
been moved out to a network outside the firewall, the client can still connect to the server. In this
case, the server must be configured to receive the IP requests (both inside and outside the firewall)
either directly or indirectly to send or receive through a configured gateway.
14.2.2 Single Server and Multi-Server
In a single-server configuration, 1000 users are serviced at a time, although there is no practical limit
on the number of users provisioned to the server. The recommended load on a single server is 4000
provisioned users, with 1000 users serviced at a time. All 4000 users can be connected to the server
but only 1000 users are active.
This scalability data is for a single dual-core processor with 4 GB RAM. If the server has more
capacity, such as 4 processors with 16 GB RAM, the capacity can be scaled up based on the
hardware.
A multi-server setup is best when there is a large number of users or when they are distributed across
different locations. Multiple servers let you use load balancing for a large number of users, or if your
users are distributed across many locations, you can provision them to the nearest iFolder server to
get a better response time. This allows you to scale in an enterprise environment where there are
many users who are located in different locations in the same geography and across geographies.
14.2.3 Novell iFolder Configuration
iFolder 3.6 must be used only in a trusted environment because there is no SSL support for it.
iFolder 3.7 and later versions provide SSL support that can be disabled during configuration in a
trusted environment. In this context, only the initial user login uses SSL to safeguard the credentials
regardless of the server-side SSL configuration. See
Configuration," on page 63
for this deployment.
62
Novell iFolder 3.8 Deployment Guide
Section 14.1, "Environments," on page
SSL Recommendations
SSL Support
Disable SSL to increase performance.
Deselect the Configure SSL for iFolder option in YaST
Require SSL communication.
Select the Configure SSL for iFolder option in YaST.
for information about the Web Admin Console features that can be used
61, the method to
Section 14.2.4, "Novell Web Admin
TM
.
Advertisement
Table of Contents
