management interface with VHM on cluster?
Hi, I have two Linux machines, both running Zope at 8080 and Apache at 80 with ProxyPass redirects to Zope. MachineA runs four virtual hosts behind a single IP. A nightly rsync copies the entire zope tree from MachineA to MachineB. Both machines use VHM/SiteRoot to return www.hostname.tld, and one of the virtual sites is load-balanced with round-robin DNS of the www record. I'd like to eventually balance all the domains. My question is, how does anyone else doing this make sure that the management interface is on a single machine? I haven't sat down with ethereal to verify exactly what happens when using http://MachineA.domain.tld/manage, but I can certainly say that if one goes to http://www.domain.tld/manage, you might get MachineB and have your changes wiped out that night. I suspect that going to MachineA.domain.tld isn't going to help, since the SiteRoot will return www.domain.tld URLs and force another DNS lookup. The best idea I've had so far is to set up SSL and force the management interface to go through 443. However, I'm still pretty fuzzy on all the details -- I've read the documentation, but it's single-host. Next best idea is to use SSH tunneling to get at the management interface via webdav or ftp and disable web management over the Internet entirely. This is easy enough to do, but tough to support for other developers. Any better ideas? thanks, -- Jack Coates Monkeynoodle: A Scientific Venture...
Jack Coates wrote:
Hi,
I have two Linux machines, both running Zope at 8080 and Apache at 80 with ProxyPass redirects to Zope. MachineA runs four virtual hosts behind a single IP. A nightly rsync copies the entire zope tree from MachineA to MachineB. Both machines use VHM/SiteRoot to return www.hostname.tld, and one of the virtual sites is load-balanced with round-robin DNS of the www record. I'd like to eventually balance all the domains.
You could disable loadbalancing for /manage urls (you'd have to change apache rewrite rules a bit - providing you use apache for round-robin). A more general solution would be to use zeo instead of nightly rsync. hth Philippe
On Tue, 2002-11-05 at 23:36, Philippe Jadin wrote:
Jack Coates wrote:
Hi,
I have two Linux machines, both running Zope at 8080 and Apache at 80 with ProxyPass redirects to Zope. MachineA runs four virtual hosts behind a single IP. A nightly rsync copies the entire zope tree from MachineA to MachineB. Both machines use VHM/SiteRoot to return www.hostname.tld, and one of the virtual sites is load-balanced with round-robin DNS of the www record. I'd like to eventually balance all the domains.
You could disable loadbalancing for /manage urls (you'd have to change apache rewrite rules a bit - providing you use apache for round-robin).
By the time Apache gets it, the DNS decision has already been made: <IfModule mod_proxy.c> # Zope-related statements ProxyPass / http://192.168.1.1:8080/mn/ ProxyPassReverse / http://192.168.1.1:8080/mn/ ProxyPass /misc_ http://192.168.1.1:8080/misc_ ProxyPass /p_ http://192.168.1.1:8080/p_ </IfModule> However, I could add a RedirectMatch manage [F] to MachineB and put up with the occasional weird error, I guess. Actually, how about a ProxyPass manage http://MachineA.domain.tld/ on MachineB? This is probably worth a try. Passes apachectl configtest. Appears to be working. Cool.
A more general solution would be to use zeo instead of nightly rsync.
hth
Philippe
-- Jack Coates Monkeynoodle: A Scientific Venture...
participants (2)
-
Jack Coates -
Philippe Jadin