Re: [gentoo-user] Apache RProxy setup
Leo wrote: Is there a preferred *Gentoo* way setup this up? Any suggestions, pitfalls alerts, or comments are welcome. yea, use pound. the Apache reverse proxy has some nasty pitfalls which can leave you open to attack by spammers. i.e. they use your proxy to connect to other mail servers. while you can close the holes, the question should be why work so hard? Pound fails safe unlike Apache which fails open. You can even use xforward options to make your logs more accurate on the Apache side. ---eric -- http://www.wired.com/wired/archive/13.03/view.html?pg=5 The result of the duopoly that currently defines "competition" is that prices and service suck. We're the world's leader in Internet technology - except that we're not. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Apache RProxy setup
Eric: I am not familiar with pound... My reverse proxy is only for web requests :) I want "http:///perl/*" to be proxied; I don't mind if my lightweight apache handles stuff like "http:///imgs/logo.png" That way my memory intensive perl app doesn't consume large amounts of memory for requests of static content (the lightweight non-apache server takes care of that) If each perl enabled apache process consumes 5 megas (depends on the app) 100 processes consumes 500 MB. I can cut the memory usage down by making my apache processes more specialized. Vanilla apache for requests that do not require perl and all it memory baggage, and Perl apache for those requests that are dependent on some perl processing. I can have 50 or 100 lightweight apache processes running and 5 or 10 perl enabled apache processes without paying for the memory of 100 perl processes. I am not sure if pound fits my requirements Leo Eric S. Johansson wrote: Leo wrote: Is there a preferred *Gentoo* way setup this up? Any suggestions, pitfalls alerts, or comments are welcome. yea, use pound. the Apache reverse proxy has some nasty pitfalls which can leave you open to attack by spammers. i.e. they use your proxy to connect to other mail servers. while you can close the holes, the question should be why work so hard? Pound fails safe unlike Apache which fails open. You can even use xforward options to make your logs more accurate on the Apache side. ---eric -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Apache RProxy setup
Leo wrote: Eric: I am not familiar with pound... My reverse proxy is only for web requests :) I want "http:///perl/*" to be proxied; I don't mind if my lightweight apache handles stuff like "http:///imgs/logo.png" That way my memory intensive perl app doesn't consume large amounts of memory for requests of static content (the lightweight non-apache server takes care of that) If each perl enabled apache process consumes 5 megas (depends on the app) 100 processes consumes 500 MB. I can cut the memory usage down by making my apache processes more specialized. Vanilla apache for requests that do not require perl and all it memory baggage, and Perl apache for those requests that are dependent on some perl processing. I can have 50 or 100 lightweight apache processes running and 5 or 10 perl enabled apache processes without paying for the memory of 100 perl processes. I am not sure if pound fits my requirements I understand. Yes, it will work, yes. it does fit your requirements. I'm just not sure how to set the configuration file. It's probably something you will need to do with URL group but I haven't found the documentation. http://www.apsis.ch/pound/ -- http://www.wired.com/wired/archive/13.03/view.html?pg=5 The result of the duopoly that currently defines "competition" is that prices and service suck. We're the world's leader in Internet technology - except that we're not. -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Apache RProxy setup
Eric S. Johansson wrote: Leo wrote: Eric: I am not familiar with pound... My reverse proxy is only for web requests :) I am not sure if pound fits my requirements I understand. Yes, it will work, yes. it does fit your requirements. I'm just not sure how to set the configuration file. It's probably something you will need to do with URL group but I haven't found the documentation. http://www.apsis.ch/pound/ Thanks, I took a look. I will need to run two apache servers anyway, I benefit from having a more "secure" RProxy, and it has load balancing features which is nice as you can scale your web app/site to several machines if needed. I'll read the docs. Leo Leo -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Apache RProxy setup
> Eric S. Johansson wrote: > >> Leo wrote: >> >>> Eric: >>> >>> I am not familiar with pound... >>> >>> My reverse proxy is only for web requests :) This is how i do it in the apache conf: ProxyPass /exchange/ http://SPBmail/exchange/ ProxyPassReverse /exchange/ http://SPBmail/exchange/ the second part is toward the other server. Patrick -- gentoo-user@gentoo.org mailing list
