Peter Lin wrote: > I'm gonna say that's quite a bit of myth here. If SSL is important, get a > cheap SSL enabled router. Doing software SSL is waste of CPU power and > impacts the server's stability. Anyone that has a lot of HTTPS traffic > shouldn't be using software SSL in my bias opinion. If you are so > desparate > that you need software SSL, as remy says, there's APR. no need to stick > apache httpd infront.
Guess my information regarding Tomcat + SSL was a bit outdated. Last time AFAIR I measured Tomcat 5.0.x (no APR avail) vs. Apache+Tomcat 5.0.x. So good to know there are new options with 5.5.x, Remy. Well regarding the HW vs. SW question, there's another point: Often you have different DMZs (e.g. you are required to do it for security reasons and some "forced" protocol changes) eventhough you know that you'll have servers running idle. In that case you might have pure Apache HTTPD servers in one DMZ and some Tomcats in another DMZ. Some HTTPS handling and not just AJP forwarding will use at least some CPU time in your external machines. ;-) if an SSL-enabled router is not what other people want. Cheers, Michael > > my bias 2 bits on this topic > > peter > > On 6/1/06, Remy Maucherat <[EMAIL PROTECTED]> wrote: > >> >> On 6/1/06, Michael Echerer <[EMAIL PROTECTED]> wrote: >> > Danny Lee wrote: >> > > Hi guys! >> > > >> > > I wondering if it's really so good to use Tomcat behind "a real" web >> > > server like Apache or IIS. >> > > >> > >> > In case you have a lot of HTTPS traffic, you'll find that having Apache >> > handle SSL is faster than the Java implementation that Tomcat can >> offer. >> > >> > IMHO for HTTP traffic performance is "almost" comparable as long as you >> > don't need 100% perf, but for HTTPS Apache is definitely better already >> > with not so many concurrent requests. >> >> Great post. And now, for the real information: >> http://tomcat.apache.org/tomcat-5.5-doc/apr.html >> >> :) >> >> -- >> xxxxxxxxxxxxxxxxxxxxxxxxx >> Rémy Maucherat >> Developer & Consultant >> JBoss Inc >> xxxxxxxxxxxxxxxxxxxxxxxxx >> >> --------------------------------------------------------------------- >> To start a new topic, e-mail: users@tomcat.apache.org >> To unsubscribe, e-mail: [EMAIL PROTECTED] >> For additional commands, e-mail: [EMAIL PROTECTED] >> >> > --------------------------------------------------------------------- To start a new topic, e-mail: users@tomcat.apache.org To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
