On Tuesday, October 15, 2013 9:47:59 PM UTC+4, exos wrote: > > 2013/10/15 Alex Kocharin <[email protected] <javascript:>> > >> 15.10.2013, 18:56, "Tio Oscar" <[email protected] <javascript:>>: >> >> Sorry my english. >> >> First you have to consider an application runs over a system user. The only >> user who can open ports below 1024 is root. Apache, Nginx, etc. solved this, >> running a master process as root, and created forks that run on non-root >> users. >> >> >> Nginx runs as root and do not do any forks. It just downgrades >> permissions after it starts. Node.js can do the same: >> >> http://nodejs.org/api/process.html#process_process_setuid_id >> http://nodejs.org/api/process.html#process_process_setgid_id >> >> >> >> Run any interpreter (VM) under root is a big risk not worth being taken. >> >> >> Running everything under root is a risk. VMs are no different. >> > > There is a big difference. A VM abstracts the basic instructions, running > on dynamic stages, Growing the possibilities to inject malicious code. > >
Some people might argue that VM is safer because it abstracts out buffers, so you can't do things like buffer overflow you used to have in C. There is no difference. Both choices have certain bugs and both choices work well if implemented properly. >> That is on one hand, on the other, web servers like Apache or Nginx hasmany >> resolved things that should be implemented on node.js from zero. >> >> I've been using nginx as reversal proxy for node.js applications, and I >> can say that the performance is not affected, especially if instead of >> using network ports used unix sockets. >> >> I think if it makes the whole process of verification and analysis that >> makes nginx on buffer sizes, head supports, etc.. in node.js, you lose >> more performance than a software built directly in C for this purpose. >> >> >> 2013/10/15 Norman Paniagua <[email protected] <javascript:>> >> >> What? nodejs vs webservers? yes, my real question is, there is lost >> performance if you put your multiple nodejs apps behind a webserver (with >> proxy)? >> >> Or its just better to use the node itself to run all your apps (using >> vhost if all the apps are using express)? or have a nodejs router like >> multi-sites <https://github.com/oren/multi-sites>? >> >> The idea behind this is just to know what way its better, some cons of >> using webserver like apache (don't know if its applicable to nginx) its that >> websockets didn't work. >> >> Regards >> >> >> -- >> -- >> Job Board: http://jobs.nodejs.org/ >> Posting guidelines: >> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines >> You received this message because you are subscribed to the Google >> Groups "nodejs" group. >> To post to this group, send email to [email protected]<javascript:> >> To unsubscribe from this group, send email to >> [email protected] <javascript:> >> For more options, visit this group at >> http://groups.google.com/group/nodejs?hl=en?hl=en >> >> --- >> You received this message because you are subscribed to the Google Groups >> "nodejs" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> >> >> >> -- >> Exos ~ Programador, hacker y filósofo >> web: http://blog.exodica.com.ar >> Linked'in: http://www.linkedin.com/in/ogexos >> Twitter: @exos, Indeti.ca: @exos >> Tels: [+54 11] 6385-EXOS (3967) - [+54 9 11] 6133-2442 >> >> -----BEGIN GEEK CODE BLOCK----- >> Version: 3.1 >> GCS/IT d-- s:++ a- C+++$ UBL+++$ P(-) L+++$ !E--- W+++$ !N !o K-? !w--- >> !O !M-- V? PS+++@ !PE Y+(++) PGP++ !t--- !5 X++ R(+) tv--? b- DI D-- G e@ >> h>++ r+++(-) y+++>+++++ >> ------END GEEK CODE BLOCK------ >> >> >> -- >> -- >> Job Board: http://jobs.nodejs.org/ >> Posting guidelines: >> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines >> You received this message because you are subscribed to the Google >> Groups "nodejs" group. >> To post to this group, send email to [email protected]<javascript:> >> To unsubscribe from this group, send email to >> [email protected] <javascript:> >> For more options, visit this group at >> http://groups.google.com/group/nodejs?hl=en?hl=en >> >> --- >> You received this message because you are subscribed to the Google Groups >> "nodejs" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> -- >> -- >> Job Board: http://jobs.nodejs.org/ >> Posting guidelines: >> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines >> You received this message because you are subscribed to the Google >> Groups "nodejs" group. >> To post to this group, send email to [email protected]<javascript:> >> To unsubscribe from this group, send email to >> [email protected] <javascript:> >> For more options, visit this group at >> http://groups.google.com/group/nodejs?hl=en?hl=en >> >> --- >> You received this message because you are subscribed to the Google Groups >> "nodejs" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> For more options, visit https://groups.google.com/groups/opt_out. >> > > > > -- > Exos ~ Programador, hacker y filósofo > web: http://blog.exodica.com.ar > Linked'in: http://www.linkedin.com/in/ogexos > Twitter: @exos, Indeti.ca: @exos > Tels: [+54 11] 6385-EXOS (3967) - [+54 9 11] 6133-2442 > > -----BEGIN GEEK CODE BLOCK----- > Version: 3.1 > GCS/IT d-- s:++ a- C+++$ UBL+++$ P(-) L+++$ !E--- W+++$ !N !o K-? !w--- !O > !M-- V? PS+++@ !PE Y+(++) PGP++ !t--- !5 X++ R(+) tv--? b- DI D-- G e@ h>++ > r+++(-) y+++>+++++ > ------END GEEK CODE BLOCK------ > -- -- Job Board: http://jobs.nodejs.org/ Posting guidelines: https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines You received this message because you are subscribed to the Google Groups "nodejs" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/nodejs?hl=en?hl=en --- You received this message because you are subscribed to the Google Groups "nodejs" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/groups/opt_out.
