This topic provides information on setting up a proxy, and using the Pack200 tool for your Java applications.
This topic includes the following sections:
For enterprise customers it is important to be able to set up secure computing environments within their companies, and proxy configuration is an essential part of doing that. Proxy configuration acts as a security barrier; it ensures that the proxy server monitors all traffic between the Internet and the intranet.
Proxy configuration is normally an integral part of security enforcement in corporate firewalls within intranets. Enterprise customers who want to use Java Plug-in to deploy applets, or Java Web Start to run applications on their intranet web pages can also set up proxy support. This support is required for Java Plug-in and Java Web Start to work in an intranet environment and can be set up through the Java Control Panel.
The Java Control Panel provides four proxy options through the Network Setting dialog, which is accessed by clicking Network Settings in the General tab:
Use browser settings
Use proxy server
Use automatic proxy configuration script
Direct connection
If Use browser settings is selected, then proxy information is obtained entirely through the browser. To change proxy information, see the documentation for your browser:
Internet Explorer:
Change proxy settings in Internet Explorer (Windows Vista, Windows 7, Windows 8)
Configure Proxy Settings for Internet Explorer (Windows Server 2008 R2)
Firefox: Change proxy settings in the Options window - Advanced panel
Chrome: Chrome uses the same connection and proxy settings as Windows; follow the same steps as you would with Internet Explorer
If you select Use proxy server in the Java Control Panel, you have two choices:
Set the Address and the Port for a proxy server with the option to bypass it for local addresses.
Individually set the proxy server for HTTP, Secure, FTP, and Socks connections. You can also provide a list of addresses for which you do not want to use a proxy server.
If you select Use automatic proxy configuration script, then you must enter the URL for the location of the JavaScript method called FindProxyForURL(URL url)
that returns the proxy server to be used for a URL. Support for this script is the same as described in Section 28.5, "Automatic Proxy Configuration."
Because browsers on different platforms store proxy information differently, there is no generic mechanism to obtain proxy information. Here is how proxy information is obtained from Internet Explorer and Firefox on Windows:
Internet Explorer: Internet Explorer obtains proxy information from the same set of keys in the Windows registry. Java Plug-in and Java Web Start extract this information directly from the registry.
Firefox: Firefox stores proxy information in a preference file under the user profile directory on the local machine. Firefox also has public APIs available for determining proxy information. Java Plug-in uses these public APIs to obtain the proxy information; Java Web Start obtains the proxy information through reading and parsing the preference file.
Java Plug-in and Java Web Start obtain proxy information at startup time. If you change the proxy settings after Java Plug-in or Java Web Start have started, you may force reloading of the proxy information from the browser through the p option in the Java Console. Java Web Start is restarted for each application, so new proxy information will be used automatically on subsequent launches.
Internet Explorer, Firefox, and Chrome support manual proxy configuration. Users can specify the proxy server and port for each protocol. Users can also specify one proxy server and port for all protocols. To minimize the workload of the proxy server, some sites might bypass the proxy server completely when a machine is connecting to another machine inside the intranet environment. To do this, network administrators and users can specify a proxy server bypass list in the browser's proxy setting.
Internet Explorer: Java Plug-in and Java Web Start recognize and supports the proxy server and port setting associated with the protocol. IE supports various syntaxes in the proxy server bypass list, as follows:
IP address/host name only
IP address/host name with wildcard
IP address/host name with protocol
For example, if you specify "203.0.113.0;*.eng;http://*.com
" in the proxy server bypass list, then the browser bypasses the proxy whenever one of the following occurs:
"203.0.113.0" is requested
the URL host name ends with .eng
the URL protocol is HTTP
and the URL host name ends with .com
Currently Java Plug-in and Java Web Start support the first two syntaxes in the proxy server bypass list in IE. IE also supports bypassing the proxy server for local (intranet) addresses without using the proxy server bypass list. Java Plug-in and Java Web Start support this option by bypassing the proxy server if the URL host name contains no dot (.).
Firefox: Java Plug-in and Java Web Start recognize and supports the proxy server and port setting associated with the protocol. For example, if you specify .eng,.sun.com
in the proxy server bypass list in Firefox, it bypasses the proxy whenever the URL hostname ends with .eng
or .sun.com
. Java Plug-in and Java Web Start fully support this syntax in the proxy server bypass list in Firefox.
For more information about manual proxy configuration in your browser, consult the user guide for your browser.
Automatic proxy configuration is supported in the browser by setting a particular URL that contains a JavaScript file with .pac
or .js
extension. This file contains a function called FindProxyForURL
that contains the logic to determine which proxy server to use when the browser receives a connection request. This function is written by the system administrator for the particular intranet environment. When the browser starts up, it recognizes the URL of the JavaScript file and downloads the file to the local machine using direct connection. Then whenever it needs to make a new connection, the browser executes the JavaScript function FindProxyForURL
in the file to obtain the proxy information to set up the connection.
Java Plug-in
Internet Explorer: During startup, Java Plug-in downloads the JavaScript file to the local machine using direct connection. Then whenever it needs to make a new connection, it executes the FindProxyForURL
function to obtain the proxy information using the JavaScript engine in Internet Explorer.
Firefox: During startup, Java Plug-in downloads the JavaScript file to the local machine using direct connection. Then whenever it needs to make a new connection, it executes the FindProxyForURL
function to obtain the proxy information by using the JavaScript engine in Firefox.
Java Web Start
Windows: During startup, Java Web Start downloads the JavaScript file to the local machine using direct connection. Then whenever it needs to make a new connection, it executes the FindProxyForURL function to obtain the proxy information using the JavaScript engine in Internet Explorer.
Linux, Solaris, OS X: During startup, Java Web Start downloads the JavaScript file to the local machine using direct connection. Then whenever it needs to make a new connection, it will parse the FindProxyForURL
function and try its best guess to obtain the proxy information.
Notes on FindProxyForURL
Given a JavaScript engine, the following is applicable to Java Plug-in on all platforms and to Java Web Start on Windows only.
There are a number of JavaScript helper functions which can be called from the JavaScript function FindProxyForURL
. Java Plug-in and Java Web Start provide their own implementations of these functions to completely emulate automatic proxy configuration. Regarding the implementation of these helper function, note the following:
Function dnsResolve
always returns an empty string if the host is not an IP address.
Function isResolvable
always returns false if the host is not an IP address.
Function isInNet
always returns false if the host is not an IP address.
Executing the function FindProxyForURL
always returns proxy information as a string. Java Plug-in and Java Web Start extract the setting in the following way:
If DIRECT
is in the string, Java Plug-in and Java Web Start assume direct connection.
If PROXY
is in the string, they use the first proxy setting for the connection.
If SOCKS
is in the string, they use the SOCKS v4 for the connection.
Otherwise, the proxy information in the string is incorrect. In this case, Java Plug-in and Java Web Start assume direct connection.
Developers sometimes might need to determine the proxy configuration of a given host. By knowing the proxy configuration, they can write more intelligent code to connect to the host through the proper proxy server. The java.net.ProxySelector
class provides configuration support. Here is a simple code example:
When the Java system property jnlp.packEnabled
is set to true
in a JNLP file or an applet tag, Java Plug-in or Java Web Start downloads the JAR file compressed by the Pack200 tool. If the compressed version is not available, Java Plug-in or Java Web Start looks for the uncompressed version.
Note: Pack200 compressed JAR files must have the extension |
Use the property tag to specify jnlp.packEnabled
to true
within the resources tags, for example:
<jnlp ...> ... <resources> <property name="jnlp.packEnabled" value="true"/> <java version="1.5+" href="http://javadl.sun.com/webapps/jawsautodl/AutoDL/j2se"/> <jar href="sampleApp.jar" main="true" download="eager"/> </resources> ... </jnlp>
In this example, Java Web Start and the Java Plug-in first look for sampleApp.jar.pack.gz
. If the file is not found, they look for the original, sampleApp.jar
.
Pass the -Djnlp.packEnabled
VM argument by using java_arguments
, for example:
<HTML> ... <APPLET CODE="HelloWorld.class" WIDTH=150 HEIGHT=25> <PARAM NAME = "cache_archive" VALUE = "HelloWorld.jar"/> <PARAM NAME="java_arguments" VALUE="-Djnlp.packEnabled=true"/> </APPLET> ... </HTML>
The Java Plug-in looks for HelloWorld.jar.pack.gz
; if this file is not available, it looks for HelloWorld.jar
.