Re: Would this work? (Load Balance Question)

2003-11-20 Thread Antonio Fiol BonnĂ­n
We do that, with a firewall in front of the Apache, and one behind it, 
in front of the TC and DB.

BTW: It works ;-)

Antonio

Andreas Mohrig wrote:

Dave,

although I have never set up such a configuration, I have thought about it
quite a lot. This is exactly the thing I would try and I'm pretty much
convinced that it should work. It is even quite attractive from a security
point of view, because neither your tmocat servers nor your database-server
get any chance to expose some services/ports to the whole wide world
(provided you disable routing on your webserver). 

Of course you would need a switch on the internal network, but that could
even be a gigabit-switch to remove at least one bottleneck.
Greetings

Andreas Mohrig

-Original Message-
From: David O'Brien [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 18, 2003 5:34 PM
To: [EMAIL PROTECTED]
Subject: Would this work? (Load Balance Question)
I have one apache web server conversing with two separate tomcat servers 
with access a fourth MySql server.

Could I set it up like this?
pre
 The Internet
  |
  |
 (real IP addresses)
   -- External Network 
   |
  ---   ------   ---
  | |   | || |   | |
  |W|   |T||T|   |M|
  |W|   |C||C|   |Y|
  |W|   | || |   |S|
  | |   |1||2|   |Q|
  | |   | || |   |L|
  | |   | || |   | |
  ---   ------   ---
   | |  | |
   --- Internal Network ---
(192.168.0. addresses)
/pre
All the machines have 2 nics on board. I am worried that the other external 
network traffic
is slowing my response time, So I'd like to separate the backend processing 
from the
external network.

-Dave



David G. O'Brien
Web Services Coordinator / Systems Administrator
NACCRRA
The Nation's Network of Child Care Resource  Referral
1319 F Street NW, Suite 500
Washington, DC 20004
(202) 393-5501 ext. 113
(202) 393-1109 fax
 




smime.p7s
Description: S/MIME Cryptographic Signature


Would this work? (Load Balance Question)

2003-11-18 Thread David O'Brien
I have one apache web server conversing with two separate tomcat servers 
with access a fourth MySql server.

Could I set it up like this?
pre
 The Internet
  |
  |
 (real IP addresses)
   -- External Network 
   |
  ---   ------   ---
  | |   | || |   | |
  |W|   |T||T|   |M|
  |W|   |C||C|   |Y|
  |W|   | || |   |S|
  | |   |1||2|   |Q|
  | |   | || |   |L|
  | |   | || |   | |
  ---   ------   ---
   | |  | |
   --- Internal Network ---
(192.168.0. addresses)
/pre
All the machines have 2 nics on board. I am worried that the other external 
network traffic
is slowing my response time, So I'd like to separate the backend processing 
from the
external network.

-Dave



David G. O'Brien
Web Services Coordinator / Systems Administrator
NACCRRA
The Nation's Network of Child Care Resource  Referral
1319 F Street NW, Suite 500
Washington, DC 20004
(202) 393-5501 ext. 113
(202) 393-1109 fax


RE: Would this work? (Load Balance Question)

2003-11-18 Thread Andreas Mohrig
Dave,

although I have never set up such a configuration, I have thought about it
quite a lot. This is exactly the thing I would try and I'm pretty much
convinced that it should work. It is even quite attractive from a security
point of view, because neither your tmocat servers nor your database-server
get any chance to expose some services/ports to the whole wide world
(provided you disable routing on your webserver). 

Of course you would need a switch on the internal network, but that could
even be a gigabit-switch to remove at least one bottleneck.

Greetings

Andreas Mohrig

-Original Message-
From: David O'Brien [mailto:[EMAIL PROTECTED]
Sent: Tuesday, November 18, 2003 5:34 PM
To: [EMAIL PROTECTED]
Subject: Would this work? (Load Balance Question)


I have one apache web server conversing with two separate tomcat servers 
with access a fourth MySql server.

Could I set it up like this?
pre
  The Internet
   |
   |
  (real IP addresses)
-- External Network 
|
   ---   ------   ---
   | |   | || |   | |
   |W|   |T||T|   |M|
   |W|   |C||C|   |Y|
   |W|   | || |   |S|
   | |   |1||2|   |Q|
   | |   | || |   |L|
   | |   | || |   | |
   ---   ------   ---
| |  | |
--- Internal Network ---
 (192.168.0. addresses)
/pre
All the machines have 2 nics on board. I am worried that the other external 
network traffic
is slowing my response time, So I'd like to separate the backend processing 
from the
external network.

-Dave



David G. O'Brien
Web Services Coordinator / Systems Administrator

NACCRRA
The Nation's Network of Child Care Resource  Referral
1319 F Street NW, Suite 500
Washington, DC 20004
(202) 393-5501 ext. 113
(202) 393-1109 fax


Re: Would this work? (Load Balance Question)

2003-11-18 Thread Tim Funk
Yes. And that is a prefered way to set things up. [Don't expose your app 
servers to the Internet if you don't have to.]

-Tim

David O'Brien wrote:

I have one apache web server conversing with two separate tomcat servers 
with access a fourth MySql server.

Could I set it up like this?
pre
 The Internet
  |
  |
 (real IP addresses)
   -- External Network 
   |
  ---   ------   ---
  | |   | || |   | |
  |W|   |T||T|   |M|
  |W|   |C||C|   |Y|
  |W|   | || |   |S|
  | |   |1||2|   |Q|
  | |   | || |   |L|
  | |   | || |   | |
  ---   ------   ---
   | |  | |
   --- Internal Network ---
(192.168.0. addresses)
/pre
All the machines have 2 nics on board. I am worried that the other 
external network traffic
is slowing my response time, So I'd like to separate the backend 
processing from the
external network.



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]