Le 18/09/2012 22:59, Mark Hayden (local) a écrit : > > On Tue, 2012-09-18 at 09:48 +0200, Dominique Chabord wrote: >> >> Sorry, I don't have the answer, but, out of curiosity, what is the >> benefit of using nginx in between ? >> >> regards >> >> -- >> Dominique Chabord - SISalp >> >> -- > > Well there could be the potential for load balancing as a possibility, > but the main reason is that eventually I will be having at least 3 VMs > in openstack running independent installations of Tryton--one in each > tenant, but my available public IP addresses are limited such that I do > not have enough to spare one dedicated to each.
Thank you for explaining. I run hundreds of tryton and openerp servers behind a single IP on tens of VMs. I assign ports to every service, then I redirect to the right VM in iptables. It is simpler and more efficient in my case. > > With NGINX or Apache or lighttpd or whatever in front, on a VM that has > one public IP and access to each of the private VLANs, permits > accessibility to all the Tryton installs thorugh one IP address using > proxy-pass to connect up with the right host in the private networks. Correct, I don't do it for tryton because it is not needed.(required for openerp only) > > I may eventually migrate towards a VPN-based solution--especially if > this situation does not work, but then I have to put not only he tryton > client on remote machines but also openVPN client and config and > instructions on how to connect the VPN before opening Tryton. This is > do-able but may intimidate some of the users. This is safer indeed because the login page is not exposed to internet. I support ssh tunnelling too, windows users need a shortcut with putty embarked. Best regards -- Dominique Chabord - SISalp -- -- [email protected] mailing list
