>
> That's interesting experience. I am using mod_jk for about 10 years and
> mod_proxy_ajp for about 4 years
> on production servers and I have never had such problems. I prefer AJP
> because it forwards the request intact with all
> the available information about remote IP, authenticated user, SSL and so
> on. I use various authentication
> schemes heavily - X509 client certificates (mod_ssl), Shibboleth
> (mod_shib), Kerberos (mod_auth_kerb), LDAP (mod_ldap) -
> and for that AJP is better than plain HTTP proxy that replaces the
> original request with a new request.
> AJP even allows me to forward any Apache internal variables like
> SSL_CLIENT_S_DN which is impossible with HTTP proxy.
>
AJP is fantastic in theory, the implementation is just so crummy. Like I
said, mostly it works. But I encountered these problems as the maintainer
of Pebble, where there are thousands of different environments out there,
and also working on Atlassian's hosted services, where there were tens of
thousands of tomcat servers behind Apache reverse proxies. At that scale,
if there are robustness issues, you're likely to encounter them.
All the issues you mentioned there can be worked around by attaching the
additional info to request headers.
> Best regards
>
> Martin
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> CERIT-SC Martin Kuba
> Institute of Computer Science email: [email protected]
> Masaryk University http://www.ics.muni.cz/~makub/
> Botanicka 68a, 60200 Brno, CZ mobil: +420-603-533775
> --------------------------------------------------------------
>
>
> ------------------------------------------------------------------------------
> Dive into the World of Parallel Programming The Go Parallel Website,
> sponsored
> by Intel and developed in partnership with Slashdot Media, is your hub for
> all
> things parallel software development, from weekly thought leadership blogs
> to
> news, videos, case studies, tutorials and more. Take a look and join the
> conversation now. http://goparallel.sourceforge.net/
> _______________________________________________
> Pebble-user mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/pebble-user
>
------------------------------------------------------------------------------
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Pebble-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/pebble-user
