Persona Web-to-Host

The architecture of Persona Web-to-Host is designed for scalability, security, and ease of management. The core components include the Web Server, which handles incoming HTTP/HTTPS requests and serves the user interface; the Java-based Application Server, which manages user sessions, handles business logic, and interacts with the TN3270E Server; the TN3270E Server, which communicates with the mainframe using the TN3270E protocol; and the Configuration Manager, which provides a centralized interface for configuring the system. Communication between the Web Server and Application Server occurs over HTTP/HTTPS.

The Application Server and TN3270E Server communicate using internal protocols. The system uses HTTPS to encrypt all communication between the web browser and the Application Server. Authentication is handled through LDAP and Kerberos.

Role-based access control (RBAC) is implemented to manage user permissions. The system does not use a database for persistent storage, relying on configuration files and in-memory session management. The Web Server typically listens on port 80 (HTTP) and 443 (HTTPS), while the TN3270E Server communicates with the mainframe on port 23 or a custom port.

REST APIs are available for integration with other systems. The administrative web console provides detailed logging and monitoring capabilities, including audit trails of user actions and system events. The Configuration Manager allows administrators to configure host addresses, port numbers, security settings, and session timeout values.

The system supports z/OS, z/VM, and zVSE/VSEn platforms.