Lightstreamer js call alternative

avinashghodke

Hi,
I have implemented lightstreamer in my project, thanks to

for the help and it is working great now. But now its time to go test on some other environment, first issue I am facing with HTTPS protocol.
I have changed lightstreamer port to 7070, so I can access lightstreamer server using http://LSipaddress:7070/.
But when I use the same in js to create web socket connection from HTTPS domain it is showing an error saying not secured connection.
for e.g. my web app is https://mywebapp.comand I am creating connection to lightstreamer server like http://lightstreamer:7070/ .

So I wanted to know that
1. Is there any way in which I can access lightstreamer using https ?
2. I have not added any extra security, just extended existing program. How secure is that or do I need to add external checks or security is handled by lightsreamer itself?

NOTE :: I am using moderato version of lightstreamer.
AlsoI could not find pricing for the different version of lightstreamer, so can I get that also ?

Thanks,
Avinash Ghodke

Giuseppe Corti

Hi Avinash,

Unfortunately I can confirm that Moderato edition does not support HTTPS connections, and also that whether your web app uses https then you must also connect to Lightstreamer with https, since all modern browsers do not allow cross protocol in the same page.
In order to test HTTPS connections you should consider to use the "Allegro/Presto/Vivace" edition and leverage the embedded DEMO license (lets you to test up to 20 concurrent users).
To configure https in your Lightstreamer server you have to customize the <https_server> section in the lightstreamer_conf.xml and in particular specify a keystore containing an appropriate certificate.

About pricing, please you should contact: info@lightstreamer.com

Regards,
Giuseppe

avinashghodke

Hi,
Thanks for the reply I have few more questions.
1. Can we redirect lightstreamer request through apache web server, do we have any connector between apache webserver and lightstreamer like MOD_JK is there for tomcat.
I want this so that we can use apache HTTPS for lightstreamer also, as our security team is not ready to open a new port (9090 lightstramer port)

Thanks,
Avinash J Ghodke

Giuseppe Corti

Hi Avinash,

I can confirm that the offloading of ssl operations is absolutely viable.
We are aware of many cases in which this choice was made but usually they relied for offloading the encryption algorithms involved in SSL transactions on a hardware accelerator, maybe even directly managed by the load balancer.

Indeed I am not sure this could be implemented using Apache Web Server, and are not aware of anything like mod_jk for Lightstreamer server.
In any case please be aware that any device placed in front of the Lightstreamer server should be configured in such a way that data packets are forwarded to the clients immediately, without any buffering. Buffering the response will make the client switch from streaming mode to polling mode.

Regards,
Giuseppe