> What are people in the knows experience of running CF in 
> distributed mode? Better? Faster? More secure?

Generally more secure, potentially but not generally faster. It's more
secure in that you can isolate executable code from your public-facing web
server; if the web server is successfully attacked, the attacker can not
simply run CFML commands. It may be faster in that the application server
will be dedicated to CF, and won't have to do any web server stuff, although
that is counterbalanced by the need for the web server and the application
server to talk to each other over the network.

"Better" is more a point of view than a quantifiable value here. In some
environments, removing executable content from the public-facing web server
is a requirement. Doing so doesn't have any effect on the most common
application vulnerabilities, SQL injection and XSS. It adds complexity where
it wouldn't otherwise exist, as well. One alternative to using distributed
mode is to use a reverse proxy, which has the same effect of removing
executable content from the public interface, but which has the advantage of
being understood by the guy who's managing the web server (in most cases).

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Create robust enterprise, web RIAs.
Upgrade & integrate Adobe Coldfusion MX7 with Flex 2
http://www.adobe.com/products/coldfusion/flex2/

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:270275
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

Reply via email to