tunneling via ...
I am in a situation will I may soon need to outsource the running of my apache server. This may be a good thing. However, I cannot outsource the running of my zope server. So I have the situation where apache will be running on a separate box from my zope server and I am wondering how to make sure I have a secure connection between the apache server that I don't control that will be using modproxy/rewrite rules to get content out of my zope server. Currently, zope only binds to 127.0.0.1 and apacy proxy connects. Using a remote apache server implies that I will need to have zope listen on a public interface. However, I will still need to secure it so I was considering openssl or something like that. in short I have APACHE HOST <------------------> ZOPE HOST I need to secure the connection between these two hosts. Any recommendations? -- David Bear phone: 602-496-0424 fax: 602-496-0955 College of Public Programs/ASU University Center Rm 622 411 N Central Phoenix, AZ 85007-0685 "Beware the IP portfolio, everyone will be suspect of trespassing"
En/na Jaroslav Lukesh ha escrit:
----- Original Message ----- From: "David Bear" <David.Bear@asu.edu>
APACHE HOST <------------------> ZOPE HOST
I need to secure the connection between these two hosts.
use ssh tunnell
or zebedee Bye -- Luca Olivetti Wetron Automatización S.A. http://www.wetron.es/ Tel. +34 93 5883004 Fax +34 93 5883007
On Fri, Sep 28, 2007, David Bear wrote:
I am in a situation will I may soon need to outsource the running of my apache server. This may be a good thing. However, I cannot outsource the running of my zope server. So I have the situation where apache will be running on a separate box from my zope server and I am wondering how to make sure I have a secure connection between the apache server that I don't control that will be using modproxy/rewrite rules to get content out of my zope server.
Currently, zope only binds to 127.0.0.1 and apacy proxy connects.
Using a remote apache server implies that I will need to have zope listen on a public interface. However, I will still need to secure it so I was considering openssl or something like that.
Can you use openvpn to create a tunnel between the apache server and your zope server, then run zope on a private interface? Bill -- INTERNET: bill@celestial.com Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way FAX: (206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 there is nothing more difficult to take in hand, more perilous to conduct, or more uncertain in its success, than to take the lead in the introduction of a new order of things. Because the innovator has for enemies all those who have done well under the old conditions, and lukewarm defenders in those who may do well under the new. -- Machiavelli
participants (4)
-
Bill Campbell -
David Bear -
Jaroslav Lukesh -
Luca Olivetti