Platform Services Configuration

FrameWorX Servers provide the framework for all communications in GENESIS64. FrameWorX Servers can connect to and use other FrameWorX Servers. In order to understand how to configure Platform Services for your FrameWorX Servers, you must understand the following concepts:

Once you are familiar with these options, you can Configure Platform Services for Each Server and Enable Load Balancing.

Configure Platform Services for Each Server

Armed with the information described above, you must configure the platform services for each FrameWorX Server:

  1. On the server machine, open the Workbench from Start > All Programs > ICONICS > Workbench.

  1. On the ribbon's Tools tab, click the Platform Services button. The Platform Services Configuration dialog box opens, and looks something like the following. The following options can be set through the Basic tab.

Platform Services Configuration - Basic Tab

  1. Specify the Server Configuration:

In the Interfaces section of the Basic tab of the Platform Services Configuration window, you can specify, via checkbox, whether or not to use the OPC UA interface.

  1. In the Platform Services Configuration's Advanced tab, if you had set your Server Role in the Server Configuration section as "Forwarding", you can enter the forwarding IP address in the "Forward To:" text entry field.  

    You can also add load balancing servers. The Load Balancing Servers section becomes available only if you have configured the server as a Primary or Secondary server.

  1. In the Server Name field, type the name of a server that has been cloned and is part of the load balancing group.

  2. Click the plus sign icon. The server is added to the list.

  3. Repeat until each server in the load-balancing group has been added to the list. Add all servers in the group excluding the server you are configuring.

    Load Balancing Servers to Which Server Distributes the Client Load

Load Balancing and Redundancy

Load balancing is a way to scale your servers for large applications. It lets servers handle more clients and data. A server becomes the 'controlling' load balancing server when you specify a list of load balancing servers for it. If you don’t, that server itself will be ‘load-balancing’.

Servers in a Load Balancing Group

All servers in a load-balancing group must be clones of each other. They must have the same licensing and same security on their middle tier. Middle-tier servers share load balancing with other middle-tier servers; back-end servers share load balancing with other back-end servers.

How Load Balancing Works

In a group where load balancing occurs, one server intercepts client communications. After measuring the load on the other servers in the group, this server tells the client which load-balancing server to connect to. The primary server is the server that distributes the load; but if you have set up redundancy, both the primary and secondary servers are designed to distribute the load. The other servers -- those you have defined as load-balancing -- simply serve the clients that connect to the clients whose load they are designated to carry.

 

When a client session begins, load for that client is directed to a load-balancing server on the basis of the number of messages that are going through the server per second. (Messages, in this case, are requests, responses, and updates from the client.) The load-balancing server that is carrying the smallest load is assigned the client communication for the duration of the session. Load distribution occurs this way for middle-tier servers receiving communications from clients, but also for back-end servers receiving communications from middle-tier servers.

Setup of Load Balancing

To Set Up Load Balancing:

Reporting

  1. On the License tab, specify the server's licensing by choosing either Local License key (for the server to use its local license), Remote License (for the server to get a license from another FrameWorX Server) or Cloud License (for the server to use a cloud-based license).

Platform Services Configuration - License Tab

The License Exception Rules section allows users to redirect licensing to another server for specified client computers. In the example shown below, all clients connected to this FrameWorX Server get a local license. Client A gets license from PC2. Clients X and Y get their license from PC3.

 

License Exception Rules

  1. The Point Managers tab of the Platform Services Configuration window allows you to Disable/Enable and/or set  "Out-of-Process" status for specific point managers for multiple integrated data components (aggregators, aliases, data connectors, databases, histories, etc). Point Managers are plug-in modules running within the process of a FrameWorX Server. They may be disabled when their functionality is not needed, in order to minimize the FrameWorX Server’s memory footprint or for troubleshooting. Also, they may be set up to run out-of-process. Then, they run in a separate process but there is a slight performance hit when running out-of-process.

    For some listed Point Managers, clicking on the name brings up additional info in the Parameters section of the tab, where some values can be changed.

Point Managers Tab in the Platform Services Configuration Window

  1. The Passwords tab allows users to specify credentials for different modules to connect to various servers. Currently, FrameWorX Servers and OPC XML DA servers are supported. Use * for the credentials to be used for all target addresses. These credentials are used for the modules running on the local computer.

Passwords Tab in the Platform Services Configuration Window

  1. The Allowed Clients tab allows users to define which client computers are allowed to connect to the FrameWorX Server. Clients from other nodes will not be allowed. The client computer must match both lists: the Allowed IP Address Ranges (IPv4 and IPv6) and the Allowed Computer Names. Use * for any name. Use IPv4 and IPv6 addresses (Windows uses IPv6 internally). All clients are allowed by default.

Allowed Clients Tab in the Platform Services Configuration Window

  1. The Unrestricted Servers tab allows users to define which FrameWorX Servers (acting as clients) can connect to the FrameWorX Server with no security restrictions. The client computer must match both lists: the Unrestricted IP Address Ranges (IPv4 and IPv6) and the Unrestricted Computer Names. Use * for any name. Use IPv4 and IPv6 addresses (Windows uses IPv6 internally). Unrestricted access is only allowed for other FrameWorX Servers acting as clients. There are no unrestricted clients by default.

This setting is related to setting a user name/password for FrameWorX Server to FrameWorX Server communication. When a FrameWorX Server connects to another FrameWorX Server, it is treated like other client (unless configured), i.e. it gets the permissions of the default user.

 

There are two ways to get better permissions:

  1. Set up a user name/password for FrameWorX Server to FrameWorX Server communication on the ‘client’ FrameWorX Server. The ‘client’ FrameWorX Server then logs in using that user name.

  2. Set up the ‘client’ FrameWorX Server as an unrestricted client on the ‘server’ FrameWorX Server. The ‘server’ FrameWorX Server then will not check the security for the ‘client’ FrameWorX Server.

Unsecured Clients Tab in the Platform Services Configuration Window

  1. The Settings tab allows users to set parameters for Server Limits and Diagnostics.

Settings Tab in the Platform Services Configuration Window

 

The Server Limits settings protect the server from being overloaded by excessive requests from the clients.

The Diagnostics settings are for troubleshooting, evaluations/fixes.

  1. The Reserve License allows you to configure License Service behavior and set Node Reserved Licenses. Some ICONICS product users require priority access to a connected system at all times. With networked systems, users can possibly remain logged into systems that they are no longer physically near. An ICONICS Reserved User License ensures priority access without allocating specific license bits to all users.

The ICONICS Reserved User License can provide higher level users with priority access to the system and ties into existing ICONICS proper security and licensing. It sets aside needed licenses for an organization's select personnel while allowing the remaining licenses to be available for additional users.

 

The top License section allows you to reserve licenses for:

Enter a Start Delay (in milliseconds) in the text entry field for the amount of time to delay the start of the licensing service (in order to prevent any licensing server conflicts).

 

Enter the Number of Reserved User License Blocks in the next text entry field.

 

NOTE: A user with reserved license enabled will consume all of the reserved license types when running as a reserved user.

NOTE: If there are not enough reserved licenses available, the user will consume standard licenses as if they are configured to run as a standard user.

 

Resever License Tab in the Platform Services Configuration Window

 

The bottom Node Reserved Licenses section allows users to pre-allocate license types to a specific node. Enter a Node and then select a specific License Type and then enter a number in the Count column for the number of pre-allocated licenses to reserve for that node (in most cases, the Count number will be 1).

 

Once you have entered your desired information in any of the tabs within the Platform Services Configuration window, click on OK to save your settings.

Enabling Load Balancing

To enable load balancing for a client machine or server, follow the steps below.  

  1. On the client or middle-tier machine where you are enabling load balancing, open the Workbench from Start > All Programs > ICONICS > Workbench.

  2. On the ribbon's Tools tab, click the FrameWorX Server button.

  3. Put a check mark in the Enable Load Balancing check box.

  4. For information about additional fields on this dialog box, refer to the Configuring Redundant Clients for GENESIS64 Viewers topic.

  5. Click OK when you are done.

Configuration of Redundant Platform Services

You can use the FrameWorX Server provider in the classic Workbench to configure redundant platform services by specifying the machine name of your Back-End servers on the network.

  1. Open the Workbench and select the FrameWorX Server provider.

  2. Expand the active database, then expand the BackEnd Servers branch.

  3. Double-click the Platform Services sub-branch. This will open the FrameWorX Server Platform Services properties in the right-side pane of the Workbench.

  4. Enter your Server Name, Primary Machine Name and Secondary Machine Name in the text entry fields.

  5. Click Apply when you are done.

Enhancements for Edge Devices

Support for ICONICS Security

 

Edge devices can now contain a security configuration. This allows the IoT Visualizer to be secured and for system administrators to limit the actions certain users can take via the Visualizer. The edge device security configuration is based on ICONICS suite security, but with a limited set of features based on the features that are available on edge devices.

 

Support for GenEvents

GenEvents on the edge device can now be recorded and viewed locally in the IoT Visualizer. GenEvents are logged for incidents such as a user writing to a point or logging in.

 

REST Interface for Third Party Containers

Other containers running on an edge device can communicate with IoTWorX containers using the REST API. This allows partners and systems integrators to create their own containers to integrate with ICONICS components on an edge device.

 

GenBroker and Health Monitor

GenBroker and Health Monitor support have been added to the IoT device installation. IoT edge devices do not currently support GenBroker or Health Monitor, but these configurations are still supported when deploying and managing 10.95 edge devices.

 

See also:

FrameWorX Server