Hi,

I thought I'd chip in.

In our environment, we run a Juniper firewall that has a DMZ area, where we
place our public servers. These servers are regularly used both from outside
("Untrusted" area) and inside ("Trusted" area) of our network.

An interesting detail is that, at least in the Apache logs (haven't looked
at Cherokee), all the internal users, that is, in the "Trusted" area, show
up as being in the IP address of the firewall. So... ALL of those users
(more than 100 at a time) use the same IP address.

If I were to use IPHash, they would all hit the same server, and so it would
give me no advantage at all, because all my other servers would sit there
doing nothing.

It's not a big deal, as I don't have the volume of usage that would make me
look at using multiple servers yet, but something for you to think about.

That said, perhaps I can change some setting in the Firewall that would fix
that.

Cheers.
--
Urko Masse
+84-90-9088876

Marie von 
Ebner-Eschenbach<http://www.brainyquote.com/quotes/authors/m/marie_von_ebnereschenbac.html>
- "Even a stopped clock is right twice a day."

On Fri, Sep 18, 2009 at 03:51, pub crawler <[email protected]> wrote:

> Alvaro is a genius and a very nice person also.
>
>
> On Thu, Sep 17, 2009 at 4:34 PM, Stefan de Konink <[email protected]>
> wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA512
> >
> > pub crawler schreef:
> >> That's awesome no overhead solution if so.
> >
> > When will you say that Alvaro is a smart guy?
> >
> >
> > Stefan
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v2.0.11 (GNU/Linux)
> > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> >
> > iEYEAREKAAYFAkqynWEACgkQYH1+F2Rqwn2+lQCfa/Ti7PFlcY9TlrY7TlXjBhl9
> > lXIAoJJeWjdolTctVRUMXNFfwzHYU8FW
> > =IbP1
> > -----END PGP SIGNATURE-----
> >
> _______________________________________________
> Cherokee mailing list
> [email protected]
> http://lists.octality.com/listinfo/cherokee
>
_______________________________________________
Cherokee mailing list
[email protected]
http://lists.octality.com/listinfo/cherokee

Reply via email to