RE: Proxy setup w/ SSL

2000-08-09 Thread Jerrad Pierce
F5 makes load balancers >-Original Message- >From: ___cliff rayman___ [mailto:[EMAIL PROTECTED]] >Sent: Wednesday, August 09, 2000 1:18 PM >To: modperl >Subject: Re: Proxy setup w/ SSL > > > > >siberian wrote: > >> . In the F5 world KeepAlives

Re: Proxy setup w/ SSL

2000-08-09 Thread ___cliff rayman___
siberian wrote: > . In the F5 world KeepAlives destroy rules based load sorry - but what's an F5 box? -- ___cliff [EMAIL PROTECTED]http://www.genwax.com/

Re: Proxy setup w/ SSL

2000-08-09 Thread Drew Taylor
Vivek Khera wrote: > > > "DT" == Drew Taylor <[EMAIL PROTECTED]> writes: > > DT> What I would like is to add SSL to the frontend servers and ditch > DT> stronghold all together. I'm interested in suggestions for how to do > > Why not just add mod_proxy and mod_rewrite to stronghold, and rem

Re: Proxy setup w/ SSL

2000-08-08 Thread Ask Bjoern Hansen
On Tue, 8 Aug 2000, siberian wrote: [...] > Careful with Keepalives, they'll kill you if your using some load > balancing solutions. In the F5 world KeepAlives destroy rules based load > balancing, it gets ugly. Your Mileage May Vary. uh, say what. Another performance killer of SSL would be to

Re: Proxy setup w/ SSL

2000-08-08 Thread Vivek Khera
> "DT" == Drew Taylor <[EMAIL PROTECTED]> writes: DT> What I would like is to add SSL to the frontend servers and ditch DT> stronghold all together. I'm interested in suggestions for how to do Why not just add mod_proxy and mod_rewrite to stronghold, and remove mod_perl from it. The it is y

Re: Proxy setup w/ SSL (fwd)

2000-08-08 Thread Tom Brown
t request Conn Kilobytes transferred this connection ChildMegabytes transferred this child Slot Total megabytes transferred this slot Date: Tue, 8 Aug 2000 11:43:49 -0700 (PDT) From: Tom Brown <[EMAIL PROTECTED]> To: Stas Bekman <[EMAIL PROTECTED]> Subject: Re: Proxy s

Re: Proxy setup w/ SSL

2000-08-08 Thread Mads Toftum
On Tue, Aug 08, 2000 at 04:07:58PM +, Nigel Hamilton wrote: > Also, does anyone know a way to speed up SSL somehow? Well worth a read is http://www.awe.com/mark/apcon2000/ which covers most of the performance related issues. Also note that the openssl project is currently adding hardware

Re: Proxy setup w/ SSL

2000-08-08 Thread Mads Toftum
On Tue, Aug 08, 2000 at 05:08:36PM +0100, Matt Sergeant wrote: > > Keep-alives. To be able to do that you need to store your output and make > sure that your solution sends the appropriate headers that don't kill > keep-alive. These include Content-Length (which is why you need to store > your ou

Re: Proxy setup w/ SSL

2000-08-08 Thread Stas Bekman
On Tue, 8 Aug 2000, Nigel Hamilton wrote: Nigel, I hope you don't mind that I bounce it back to the list, since that's how it should be. > What is the rationale behind the content length speed improvement? > Can SSL more efficiently/quickly send the page if it knows the > content len

Re: Proxy setup w/ SSL

2000-08-08 Thread Stas Bekman
On Tue, 8 Aug 2000, Matt Sergeant wrote: > On Tue, 8 Aug 2000, Nigel Hamilton wrote: > > > Hi, > > Also, does anyone know a way to speed up SSL somehow? > > Keep-alives. To be able to do that you need to store your output and make > sure that your solution sends the appropriate headers tha

Re: Proxy setup w/ SSL

2000-08-08 Thread Adi
Nigel Hamilton wrote: > > Hi, > Also, does anyone know a way to speed up SSL somehow? There are hardware SSL accelerators that you can buy (quite expensive) which offload the CPU-intensive encryption algorithms, freeing up your CPU to do other things. Personally, I think a better approach

Re: Proxy setup w/ SSL

2000-08-08 Thread siberian
I use SSL hardware acceleration cards and they work like a champ. I think Rainbow builds these for a reasonable price ( ours came with the F5 hardware ). Before that we just ran a 'Lite' Stronghold on the front end and proxy'd back all connections to our dynamic ocntent servers. It held up really

Re: Proxy setup w/ SSL

2000-08-08 Thread Matt Sergeant
On Tue, 8 Aug 2000, Nigel Hamilton wrote: > Hi, > Also, does anyone know a way to speed up SSL somehow? Keep-alives. To be able to do that you need to store your output and make sure that your solution sends the appropriate headers that don't kill keep-alive. These include Content-Length (w

Re: Proxy setup w/ SSL

2000-08-08 Thread Nigel Hamilton
> Everyone, > > I have successfully setup the proxy system outlined in the guide, and it > seems to be working well. In my instance, the front-end httpd has > mod_proxy & mod_rewrite, while the backend is only mod_perl. I also have > a seperate instance of stronghold/mod_perl for SSL connections

Re: Proxy setup w/ SSL

2000-08-08 Thread Stas Bekman
On Tue, 8 Aug 2000, Drew Taylor wrote: > Everyone, > > I have successfully setup the proxy system outlined in the guide, and it > seems to be working well. In my instance, the front-end httpd has > mod_proxy & mod_rewrite, while the backend is only mod_perl. I also have > a seperate instance of