Imported from previous forum
hi all
i have a doubt, if client is accessing through internet, how fix is implemented between client(he can access from any where in the world) and broker.
thanx
nagesh
Use of the Interent for the FIX session layer looks the same to a FIX engine as if the TCP socket were established via a private circuit.
See "More Information", "Presentations", "Effective Use of FIX via the Internet (Securities Industry News - NY - Sep 1998)", slides 8 through 15.
> hi all
> i have a doubt, if client is accessing through internet, how fix is implemented between client(he can access from any where in the world) and broker.
> thanx
> nagesh
>
[ original email was from Ryan Pierce - rpierce@taltrade.com ]
I’d also like to mention that when using FIX via the Internet, security becomes more of an issue.
Some of the more popular solutions include:
-
Using PGP-DES-MD5 FIX security. (This is the currently defined FIX security protocol)
-
Using SSL and/or TLS. (This is what the Encryption Working Group is leaning towards recommending as the future FIX security protocol)
-
Use a software or hardware-based VPN to pass your FIX session over the Internet using an encrypted and authenticated tunnel.
That’s O.k Ryan, but in case if the client is accessing through internet,all the clients cannot have fixengine connected to their systems from where they are trading.is there any way like FIX router/server…and what is the mode of messagetype between the client and FIX router/server.
thanx
nagesh
> I’d also like to mention that when using FIX via the Internet, security becomes more of an issue.
>
> Some of the more popular solutions include:
>
> 1. Using PGP-DES-MD5 FIX security. (This is the currently defined FIX security protocol)
>
> 2. Using SSL and/or TLS. (This is what the Encryption Working Group is leaning towards recommending as the future FIX security protocol)
>
> 3. Use a software or hardware-based VPN to pass your FIX session over the Internet using an encrypted and authenticated tunnel.
>
>
[ original email was from Matt Koehler - matt.koehler@transacttools.net ]
Sure they can. It depends on how you set it up, and on the engine. It sounds like you may be looking for a FIX engine/OMS ASP-type service, there are a few out there (Namsko comes to mind, there may be others.)
Or are you trying to say that some clients have firewall issues to contend with & so are unable to make connections over the internet…?
In any case - I’d seperate out the issue of the network solution (internet vs. private network vs. direct line) from whether an engine can be set up as a FIX message router (onBehalfOf…)
as Scott Atwell said - "Use of the Interent for the FIX session layer looks the same to a FIX engine as if the TCP socket were established via a private circuit."
-Matt
> That’s O.k Ryan, but in case if the client is accessing through internet,all the clients cannot have fixengine connected to their systems from where they are trading.is there any way like FIX router/server…and what is the mode of messagetype between the client and FIX router/server.
> thanx
> nagesh
>
>
>
>
> > I’d also like to mention that when using FIX via the Internet, security becomes more of an issue.
> >
> > Some of the more popular solutions include:
> >
> > 1. Using PGP-DES-MD5 FIX security. (This is the currently defined FIX security protocol)
> >
> > 2. Using SSL and/or TLS. (This is what the Encryption Working Group is leaning towards recommending as the future FIX security protocol)
> >
> > 3. Use a software or hardware-based VPN to pass your FIX session over the Internet using an encrypted and authenticated tunnel.
> >
> >
>
I think it is also wise to define “client”. FIX is primarily designed as firm-to-firm (before the “B2B” term was coined 
). In addition, FIX has primarily been used for institutional trading vs. retail trading. I can’t tell if “client” is a client firm (customer) of the broker or if “client” is referring to a workstation/user. Typically a FIX engine sits in front of a set of users, and the linkage between the FIX engine and that set of users is defined outside of FIX (e.g. use of middleware) in an “intranet” fashion. I have seen FIX vendors who have placed a FIX engine in a browser successfully. I think you also have to consider how many endpoints you are dealing with. If that number is say, 200,000, then I would recommend the use of some middleware, ASP, etc. technology to handle some aggregation vs. considering a FIX session for each.
Matt is right, separatign the network linkage from the routing/aggregation/service bureau design should help you.
> Sure they can. It depends on how you set it up, and on the engine. It sounds like you may be looking for a FIX engine/OMS ASP-type service, there are a few out there (Namsko comes to mind, there may be others.)
>
> Or are you trying to say that some clients have firewall issues to contend with & so are unable to make connections over the internet…?
>
> In any case - I’d seperate out the issue of the network solution (internet vs. private network vs. direct line) from whether an engine can be set up as a FIX message router (onBehalfOf…)
>
> as Scott Atwell said - “Use of the Interent for the FIX session layer looks the same to a FIX engine as if the TCP socket were established via a private circuit.”
>
> -Matt
>
>
> > That’s O.k Ryan, but in case if the client is accessing through internet,all the clients cannot have fixengine connected to their systems from where they are trading.is there any way like FIX router/server…and what is the mode of messagetype between the client and FIX router/server.
> > thanx
> > nagesh
> >
> >
> >
> >
> > > I’d also like to mention that when using FIX via the Internet, security becomes more of an issue.
> > >
> > > Some of the more popular solutions include:
> > >
> > > 1. Using PGP-DES-MD5 FIX security. (This is the currently defined FIX security protocol)
> > >
> > > 2. Using SSL and/or TLS. (This is what the Encryption Working Group is leaning towards recommending as the future FIX security protocol)
> > >
> > > 3. Use a software or hardware-based VPN to pass your FIX session over the Internet using an encrypted and authenticated tunnel.
> > >
> > >
> >
>