Dear Craig & all,
We need some advice on the network infrastructure needed to run a JSP-based
web application. We'll be deploying this site very soon and are having some
problem deciding on some hardware&software issues. For now, there has been
some decisions like:
i) using 3 machines/servers to accommodate
- Apache 1.3.12 (on Server#1 with Linux Redhat),
- Tomcat 3.1(on Server#2 with Win2000),
- MS SQL Server 2000(on Server#3 with Win2000).
ii) Server#1 will be the main entrance containing only static pages.
iii) Dynamic page (jsp & servlets) requests will have to go thru Server#1
and a firewall to reach the more-secure Server#2.
iv) No J2EE.
Now, our concerns are:
i) How can we redirect jsp requests from Server#1 to a firewall to Server#2
and back? Or is this possible at all?
ii) If we open Server#2 for direct request, will it be secure? How hard is
it for someone to hack Tomcat for the jsp source?
iii) Approximately, at least how much memory would Tomcat need to support an
auction site with 1000 concurrent connection. Will 128MB be sufficient? I
know that it very much depends on how we program the application, but let's
quote from the most optimistic view.
Any help/views/comments/pointers from all you experienced deployment gurus
will be very much appreciated. Thanks.
kim.
----- Original Message -----
From: "Craig R. McClanahan" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Sunday, October 29, 2000 1:57 AM
Subject: Re: Apache and Tomcat: jsdk.jar
> "Antonio W. Lagnada" wrote:
>
> > I have Tomcat on Linux and I gave up trying to make it work for port
> > 80! I guess I just used the default port instead. My Apache server is
> > not running tomcat, i have to run the tomcat server separately. I just
> > configured my linux server to start tomcat on reboot.
> >
>
> Linux, and all other Unix systems, restrict ports < 1024 to processes
running root,
> for security reasons. You should not run Tomcat as root, because it would
give all
> your servlets root privileges.
>
> Approaches to consider for serving servlets/JSPs on port 80:
>
> * Configure Apache to forward servlet and JSP requests to Tomcat
> (as outlined in the instructions).
>
> * Find a port redirector utility (like the "redir" command available,
> at least, on Debian systems) to redirect requests on port 80 to
> the port your Tomcat is running on.
>
> > Antonio W. Lagnada
> >
>
> Craig McClanahan
>
>
===========================================================================
> To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff
JSP-INTEREST".
> Some relevant FAQs on JSP/Servlets can be found at:
>
> http://java.sun.com/products/jsp/faq.html
> http://www.esperanto.org.nz/jsp/jspfaq.html
> http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
> http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
>
===========================================================================
To unsubscribe: mailto [EMAIL PROTECTED] with body: "signoff JSP-INTEREST".
Some relevant FAQs on JSP/Servlets can be found at:
http://java.sun.com/products/jsp/faq.html
http://www.esperanto.org.nz/jsp/jspfaq.html
http://www.jguru.com/jguru/faq/faqpage.jsp?name=JSP
http://www.jguru.com/jguru/faq/faqpage.jsp?name=Servlets
