[Zope] Virtual hosting w/out Apache for Zope newbies?

[Jamie Heilman]

Lennart Regebro wrote:
> It sais "Versatile Apache is much better for serving legacy HTML/CGI 
> content".
> 
> Yes, if you want to mix in legacy HTML/CGI content, they you need to run 
> Zope behind Apache. But the claim that you ALWAYS should run Zope behind 
> Apache as soons as you are exposed to the Internet is not given any 
> support by that document. In fact, the arguments for it is rather weak.

Weak?  Hardly.  ZServer should never be exposed to the Internet or any
hostile network, its far far too fragile, and it doesn't have the
resource shaping controls that are mandatory for reliable operation. 

no resource shaping:
  http://collector.zope.org/Zope/606
buggy cannonical host handling and poor contextual rendering:
  http://collector.zope.org/Zope/813

Both of which may be averted by protecting ZServer with Apache or any
other proxy which provides the level of security requisite for hosting
a site on the Internet.  ZServer, alone on bare wire, is a disaster
waiting to happen.

Do not construe this as an argument for augmenting ZServer further,
it isn't.  If anything ZServer is too fat, and should be stripped
down.

-- 
Jamie Heilman                   http://audible.transient.net/~jamie/
"It's almost impossible to overestimate the unimportance of most things."
							-John Logue