Security - RDS (Remote Development Services)

RDS Server Configuration in CFBuilder:

1. Open RDS Configuration:
   Window → Preferences → ColdFusion → RDS Configuration

2. Add New Server:
   - Server Name: Development Server
   - Host Name: dev.example.com (or localhost)
   - Port Number: 8500 (default) or custom port
   - Context Root: /CFIDE (default)
   - RDS Password: [your RDS password]

3. Test Connection:
   Click "Test Connection" to verify settings

4. Advanced Options:
   - Use HTTPS: Enable for remote servers
   - Timeout: 30 seconds (default)
   - Use Proxy: If behind corporate proxy

Security Note:
Always use HTTPS for RDS over internet connections
to prevent password interception.

Dreamweaver RDS Configuration:

1. Site Setup → Servers → Add New Server

2. Basic Settings:
   - Server Name: CF Dev Server
   - Connect Using: FTP or Local/Network

3. Advanced Settings:
   - Server Model: ColdFusion
   - Access: RDS

4. RDS Connection:
   - Host: dev.example.com
   - Port: 8500
   - Security: Use Secure Connection (HTTPS)
   - Password: [RDS password]
   - Context Root: /CFIDE

5. Test Connection

Features Enabled:
✓ Browse server files via RDS tab
✓ Execute database queries
✓ View datasources
✓ Live data preview in design view

# Block RDS ports from external networks
# Allow only from specific IP (replace with your IP)

# Block RDS HTTP port from all
iptables -A INPUT -p tcp --dport 8500 -j DROP

# Allow RDS from trusted IP only
iptables -I INPUT -p tcp -s 192.168.1.100 --dport 8500 -j ACCEPT

# Block RDS HTTPS port from all
iptables -A INPUT -p tcp --dport 8501 -j DROP

# Allow RDS HTTPS from trusted IP only
iptables -I INPUT -p tcp -s 192.168.1.100 --dport 8501 -j ACCEPT

# Allow from local network (adjust subnet as needed)
iptables -I INPUT -p tcp -s 192.168.1.0/24 --dport 8500 -j ACCEPT
iptables -I INPUT -p tcp -s 192.168.1.0/24 --dport 8501 -j ACCEPT

# Save rules
service iptables save

# PowerShell commands for Windows Firewall

# Block RDS HTTP port
New-NetFirewallRule -DisplayName "Block RDS HTTP" `
  -Direction Inbound -LocalPort 8500 -Protocol TCP -Action Block

# Allow RDS from specific IP
New-NetFirewallRule -DisplayName "Allow RDS from Dev IP" `
  -Direction Inbound -LocalPort 8500 -Protocol TCP `
  -Action Allow -RemoteAddress 192.168.1.100

# Block RDS HTTPS port
New-NetFirewallRule -DisplayName "Block RDS HTTPS" `
  -Direction Inbound -LocalPort 8501 -Protocol TCP -Action Block

# Allow RDS HTTPS from specific IP
New-NetFirewallRule -DisplayName "Allow RDS HTTPS from Dev IP" `
  -Direction Inbound -LocalPort 8501 -Protocol TCP `
  -Action Allow -RemoteAddress 192.168.1.100

/**
 * Check if RDS is enabled on the server
 * Useful for deployment verification scripts
 */
function isRDSEnabled() {
    try {
        // Create admin API object
        adminAPI = createObject("component", "cfide.adminapi.administrator");

        // Login to admin API (requires admin password)
        adminAPI.login("your_admin_password");

        // Create security API object
        securityAPI = createObject("component", "cfide.adminapi.security");

        // Get RDS security settings
        rdsSettings = securityAPI.getRDSecurity();

        return rdsSettings.RDSEnabled;
    } catch (any e) {
        writeLog(file="rds-check", type="error",
                 text="Failed to check RDS status: #e.message#");
        return false;
    }
}

// Usage in deployment script
if (isRDSEnabled()) {
    writeLog(file="deployment", type="error",
             text="SECURITY ALERT: RDS is enabled on production!");
    // Fail deployment or send alert
}