RE: [Zope] Major security flaw in Zope 2.3.2
I've never heard of putting squid _between_ apache and ZServer, but why not put squid on the outside of your system as to not create extra latency? I think squid is much more advanced than mod_proxy in terms of caching options and raw speed. I am currently setting up a ZEO cluster with nodes running ZServer sitting behind a pair of load-balanced squid caches (the ZEO nodes are also balanced by squid's round-robin features). I am also putting ZServer behind mod_proxy for internal use, so I will have the ability at some point to one day comparatively benchmark all of these. If at some point, I do get around to it, I'll post results to the list. Sean -----Original Message----- From: Ragnar Beer [mailto:rbeer@uni-goettingen.de] Sent: Wednesday, June 06, 2001 1:04 PM To: zope@zope.org Subject: Re: [Zope] Major security flaw in Zope 2.3.2 I never thought of having Squid between Apache and Zope but it sounds very interesting. What's the advantage over mod_proxy? Ragnar
I use....
Apache -> Squid -> Zope
...with negligible additional latency at moderate loads.
Toby Dickenson
_______________________________________________ Zope maillist - Zope@zope.org http://lists.zope.org/mailman/listinfo/zope ** No cross posts or HTML encoding! ** (Related lists - http://lists.zope.org/mailman/listinfo/zope-announce http://lists.zope.org/mailman/listinfo/zope-dev )
On Wed, 06 Jun 2001 14:05:06 -0700, sean.upton@uniontrib.com wrote:
I've never heard of putting squid _between_ apache and ZServer, but why not put squid on the outside of your system as to not create extra latency?
Ive measured latency at moderate loads... for cache misses the difference is negligible, largely because Zope has a relatively high latency. If you have some pages that are: * uncacheable, and * latency-critical then you could use mod_rewrite to send them directly to Zope (not via squid). The advantages (for me) of putting Apache on the outside are virtual hosting, and using mod_rewrite to pull other back-end servers into Zope's URL namespace.
I think squid is much more advanced than mod_proxy in terms of caching options and raw speed. I am currently setting up a ZEO cluster with nodes running ZServer sitting behind a pair of load-balanced squid caches
Interesting. Are you planning these two Squid's to be independant, or peers? Toby Dickenson tdickenson@geminidataloggers.com
participants (2)
-
sean.upton＠uniontrib.com -
Toby Dickenson