Hi! We are going to host some Zope sites in the near future and therefore some questions came up: 1. When someone needs a whole Zope instance we don't like to give him a dedicated server. How usefull is it to run more than one individual Zope instances on one Server? Is there a better solution for more than one Zope instance? How helpful is ZEO in this case? 2. Which configuration is the "best": Zope + Apache, Zope's Webserver Medusa alone, any other configuration like Zope + Squid (as reverse proxy)? Which configuration fits which requirements? 3. When more than one user participates in one Zope instance, what is the preferable method to get (for the user) distinct Zope views for each user. Thanx for your answers, Juergen
On Wed, May 29, 2002 at 05:57:16PM +0200, Juergen R. Plasser / Hexagon wrote:
Hi!
We are going to host some Zope sites in the near future and therefore some questions came up:
1. When someone needs a whole Zope instance we don't like to give him a dedicated server. How usefull is it to run more than one individual Zope instances on one Server? Is there a better solution for more than one Zope instance? How helpful is ZEO in this case?
2. Which configuration is the "best": Zope + Apache, Zope's Webserver Medusa alone, any other configuration like Zope + Squid (as reverse proxy)? Which configuration fits which requirements?
3. When more than one user participates in one Zope instance, what is the preferable method to get (for the user) distinct Zope views for each user.
I am experimenting with multiple Zope sites behind one Apache. The Apache instance runs like it normally does (i.e. as user nobody), and communicates to Zope instances through PCGI. Each customer has its own Zope server running under his own userid. So they can stop and start they own Zope processes and install their own products... -- __________________________________________________ "Nothing is as subjective as reality" Reinoud van Leeuwen reinoud.v@n.leeuwen.net http://www.xs4all.nl/~reinoud __________________________________________________
On Wednesday 29 May 2002 4:57 pm, Juergen R. Plasser / Hexagon wrote:
2. Which configuration is the "best":
Zope's Webserver Medusa alone
Very bad if you are exposing this to the internet.
Zope + Apache, Zope + Squid
Which configuration fits which requirements?
The choice between these wo usually comes down to personal preference.
On Wed, 29 May 2002, Toby Dickenson wrote:
On Wednesday 29 May 2002 4:57 pm, Juergen R. Plasser / Hexagon wrote:
2. Which configuration is the "best":
Zope's Webserver Medusa alone
Very bad if you are exposing this to the internet.
Jurgen -- Can you explain why using only Medusa/Zserver is "very bad"? I was under the impression that the usual Apache approach simply delegates to the Zope native webserver without doing much of anything except eating machine cycles. I always thought the Apache/Medusa combination was used to allow for non-Zope stuff (cgi, etc) to work. -dra
On Wednesday 29 May 2002 6:19 pm, Dennis Allison wrote:
Can you explain why using only Medusa/Zserver is "very bad"?
There are a number of denial-of-service vulnerabilities in medusa's http handling, if it is given certain kinds of malformed or atypical http conversations.
I was under the impression that the usual Apache approach simply delegates to the Zope native webserver without doing much of anything except eating machine cycles.
Im more familiar with Squid, which definitely sanitizes the http conversation. (That is, the designers of squid anticipated the mistakes made by the designers of medusa) I always assumed apache/mod_proxy did the same thing....
participants (4)
-
Dennis Allison -
Juergen R. Plasser / Hexagon -
Reinoud van Leeuwen -
Toby Dickenson