On Thu, 19 May 2005, Mark wrote: > I was very interested in the discussion concerning Apache vs Tomcat > WRT Performance. While I cannot argue with the performance numbers, I > do like putting Apache in front of Tomcat for 2 reasons that I have > found so far. > > 1. SSL. If I am going to be serving pages whether they be dynamic or > static, I think Apache handles the SSL communications and key storage > better. In tests that I have run, the crypto that needs to be done to > support SSL is faster in C than Java. Also, Tomcat stores any key > information in a flat file, where Apache will prompt for a password on > startup. Now some administrators might like this better, because > Tomcat will then start automatically at boot time, I would not want > any password of mine sitting in the clear in a test file.
Agreed. > 2. If you are hosting your site using port 80 on Unix boxes this means > running Tomcat as root. I can think of very few reasons why Tomcat > needs to be run as root. Apache has the ability to 'downgrade' user > privileges once Apache is started. jscv will allow you to do this with Tomcat, a simple guide to setting this up is here http://www.mythic-beasts.com/support/topic_vds_java.html Yours, Pete Stevens -- Pete Stevens [EMAIL PROTECTED] http://www.ex-parrot.com/~pete/ .... the Flat Earth Society announced in 1995 that their membership was global --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
