Never used ATS to be honest - just use the standard apache web server - looking
at the ATS I don't think it is as easy to configure {and tbh - I place static
sites/content on the frontend Apache for faster serving - so it's dual purpose}
The answer was to Q3...
Q1 - we tried mod_security - but out of the box it is to restrictive (it breaks
wordpress admin ) so we don't actually use it
-----Original Message-----
From: Jason Long <[email protected]>
Sent: 11 March 2021 18:47
To: [email protected]
Subject: Re: [users@httpd] What should be considered about the reverse proxy
server? [EXT]
Thank you.
How about questions number 2 and 3?
On Thursday, March 11, 2021, 09:46:03 PM GMT+3:30, James Smith
<[email protected]> wrote:
A forward proxy is what you put between your web browser and the internet
(often called a proxy by browsers) often this happens on corporate networks) -
the reverse proxy is between the internet and the webserver
There are some issues with mod_security and e.g. wordpress sites - so you have
to take care to tune it - we often just use a set of general rules to act as a
first level of security
-----Original Message-----
From: Jason Long <[email protected]>
Sent: 11 March 2021 17:28
To: [email protected]
Subject: Re: [users@httpd] What should be considered about the reverse proxy
server? [EXT]
Thank you.
I have other questions:
1- When I configured a Reverse Proxy and want to use "ModSecurity", then I just
need to install the ModSecurity on Reverse Proxy server or I must install
ModSecurity on both of the Front-End and Back-End servers?
2- With ATS (Apache Traffic Server), need I to install Apache Web Server on the
Front-End server?
3- Can anyone tell me what is the main difference between the Forward Proxy and
Reverse Proxy?
On Thursday, March 11, 2021, 07:14:29 PM GMT+3:30, Antony Stone
<[email protected]> wrote:
On Thursday 11 March 2021 at 15:35:17, Jason Long wrote:
> Thank you for all replies.
> How to handle back-end server down? Is it kind of load balancing or CDN?
No.
Whether you have one back-end server or a hundred, you have to allow for the
fact that under certain circumstances the reverse proxy may not be able to
contact any of them, and therefore has to return some response to the
requesting client.
Antony.
--
I think broken pencils are pointless.
Please reply to the list;
please *don't* CC me.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
--
The Wellcome Sanger Institute is operated by Genome Research Limited, a charity
registered in England with number 1021457 and a company registered in England
with number 2742969, whose registered office is 215 Euston Road, London, NW1
2BE.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
--
The Wellcome Sanger Institute is operated by Genome Research
Limited, a charity registered in England with number 1021457 and a
company registered in England with number 2742969, whose registered
office is 215 Euston Road, London, NW1 2BE.
