Skip to main content

Masoud Kalali

Masoud Kalali has a software engineering degree and has been working on software development projects since 1998. He has experience with a variety of technologies (.NET, J2EE, CORBA, and COM+) on diverse platforms (Solaris, Linux, and Windows). His experience is in software architecture, design, and server-side development.

Masoud has published several articles at and Dzone. He has authored multiple refcards, published by Dzone, including but not limited to Using XML in Java, Java EE Security and GlassFish v3 refcardz. He is one of the founder members of NetBeans Dream Team and a GlassFish community spotlighted developer. Recently Masoud's new book, GlassFish Security has been published which covers GlassFish v3 security and Java EE 6 security.

Masoud's main area of research and interest includes service-oriented architecture and large scale systems' development and deployment and in his leisure time he enjoys photography, mountaineering and camping. Masoud's can be followed at his Twitter account.

I migrated my weblog from platform to my personal website at


kalali's blog

Netbeans 6.5 is at your door step, take a look at shining new features

Posted by kalali on October 30, 2008 at 11:47 AM PDT

NetBeans IDE seen a lot of changes during past three years, the evolutionary changes starts with NetBeans 5 and later on continued to NetBeans 5.5 when Sun Microsystems released more of its code base under the open source license.

One pager review of GlassFish version 3 features

Posted by kalali on October 28, 2008 at 3:30 AM PDT

Modular architecture

GlassFish V3 uses a modular architecture to address the emerging requirements in the Application server’s market and container profiles concept of the Java EE 6. GlassFish uses OSGI for module management, and inside the OSGI modules it uses HK2 module system for configuration and service management.

GlassFish refcard is available for download for free

Posted by kalali on July 14, 2008 at 12:28 AM PDT
GlassFish Application Server

In case that you are a glassfish administrator or a developer who uses glassfish in day to day development tasks then you will find GlassFish Reference C

NetBeans Platform Certification and training.

Posted by kalali on May 20, 2008 at 2:43 AM PDT

Netbeans is well known for beeing a great IDE for developing Java SE, Java EE, C++, Java ME, Sun SPOT,

How to Secure GlassFish installation, Part II

Posted by kalali on February 17, 2008 at 12:34 PM PST

In order to secure the application server you need to secure its communication ways with outside world, It means you will need to secure all ports and listeners.

There are 3 kind of listeners in Glassfish application server that you will need to take care of them

The train starts running, NetBeans Innovators Grants has just announced.

Posted by kalali on January 29, 2008 at 7:41 AM PST

The train start running, NetBeans Innovators Grants has just announced.

Four open source Java application servers compared

Posted by kalali on December 11, 2007 at 1:11 PM PST

I was looking at feeds that my email client fetched during the day and I find am interesting one which lead me to an article written by Jonathan Campbell. Article can be found at

How to Secure GlassFish installation.

Posted by kalali on December 5, 2007 at 1:49 PM PST

It is some days that I saw some posts about securing Glassfish in production environment, so I thought I write some of my experience here to let other secure the glassfish easier. There are some basic items that you will need to relay on in order to have a secure Glassfish installation.


How to have your Own CA and configure Glassfish and your clients for mutual authentication?, Part II

Posted by kalali on August 23, 2007 at 2:19 PM PDT

In the second part of the series, you can see how we can utilize EJBCA to create certification for a client side application which will communicate with Glassfish server when Client cert authentication (Mutual Authentication) is enabled whether by changing the listener attributes or by describing it in the web-config.xml.

How to have your Own CA and configure Glassfish and your clients for mutual authentication?

Posted by kalali on August 16, 2007 at 9:05 AM PDT

One of the most repeated question in GlassFish mailing list is SSL, Certification, Mutual Authentication,.... In this Entry I will try to address some of this questions by giving an step by step guide for using EJBCA to issue certificate, use them in both glassfish and clients which connect to glassfish in some manner. clients like web browser, standalone java applications,...