Re: placing program logic away from web server?
On Thursday, Jul 10, 2003, at 10:36 US/Pacific, William H Bowen wrote: > webServer A serves www content in Internet DMZ > webServer B serves iww (company intranet) content in c-iww DMZ > webServer C serves iww (unit intranet) content in u-iww DMZ. > > can all WebServers connect to AppServer D in Bastion? Yes. We have exactly this scenario here: our www (public website) servers connect to the same app server cluster as some of our internal web servers. In fact, we connect web servers in several different zones to app servers in other zones all the time in different combinations. Sean A Corfield -- http://www.corfield.org/blog/ "If you're not annoying somebody, you're not really alive." -- Margaret Atwood ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: placing program logic away from web server?
Cool, thanks, that clears that up :-) Now a follow-up, or rather, clarification on the scenario I mentioned before. Jim Davis' mail about the zones (DMZ, Bastion, and Stockade) accurately describes setup we have here. But my question (which upon re-reading was not clear) is whether three different web servers serving different types of pages (essentially a multihome situation) can operate using one application server (or group of application servers clustered) so: webServer A serves www content in Internet DMZ webServer B serves iww (company intranet) content in c-iww DMZ webServer C serves iww (unit intranet) content in u-iww DMZ. can all WebServers connect to AppServer D in Bastion? thanks will Sean A Corfield wrote: >On Tuesday, Jul 8, 2003, at 12:34 US/Pacific, William Bowen wrote: > > >>>I don't know about SQL Server but Oracle uses 1521. >>> >>> >>1433 for SQL Server, but I was actually referring to which port the Web >>Server to App Server connection through the firewall would be (I've >>already >>got the Web/App Server connected to the SQL Server through the >>firewall part >>working). >> >> > >Ah, OK. Well, the answer is: it depends. > >If you use the JRun connector, you'll need whatever ports open that the >JNDI protocol operates on for your CFMX install - that might be 51000 >or higher (e.g., 51010 depending on CFMX of J2EE configuration). > >If you use mod_proxy to rewrite/proxy CF requests to the JRun Web >Server (as we do because we use hardware load balancing on each tier - >see Brandon Purcell / Frank DeRienzo's article on this), then the port >will be whatever JWS runs on (for us, 8300 and 8400 - for you it might >be 8500). > >Sean A Corfield -- http://www.corfield.org/blog/ > >"If you're not annoying somebody, you're not really alive." >-- Margaret Atwood > > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: placing program logic away from web server?
On Tuesday, Jul 8, 2003, at 12:34 US/Pacific, William Bowen wrote: >> I don't know about SQL Server but Oracle uses 1521. > 1433 for SQL Server, but I was actually referring to which port the Web > Server to App Server connection through the firewall would be (I've > already > got the Web/App Server connected to the SQL Server through the > firewall part > working). Ah, OK. Well, the answer is: it depends. If you use the JRun connector, you'll need whatever ports open that the JNDI protocol operates on for your CFMX install - that might be 51000 or higher (e.g., 51010 depending on CFMX of J2EE configuration). If you use mod_proxy to rewrite/proxy CF requests to the JRun Web Server (as we do because we use hardware load balancing on each tier - see Brandon Purcell / Frank DeRienzo's article on this), then the port will be whatever JWS runs on (for us, 8300 and 8400 - for you it might be 8500). Sean A Corfield -- http://www.corfield.org/blog/ "If you're not annoying somebody, you're not really alive." -- Margaret Atwood ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. http://www.cfhosting.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: placing program logic away from web server?
In the systems I've been involved with there are three tiers: 1) The Internal network (sometimes called the "stockade" or some other military term representing a secure area). This area is the most protected: everything requires authentication and nothing can directly touch the outside. This area contains full corporate databases, employee records and the like. 2) The middle area, or "Bastion", is semi-protected. It contains things like web application database servers, webapplication engines and so forth. 3) The open area, or "Demilitarized Zone (DMZ)" is accessible from the open Internet and contains all the public facing machines: web servers, presentation servers, etc. Tiers can speak only in order: the Stockade and DMZ can speak only to the Bastion and the Bastion to either. Every tier is surrounded by firewalls enforcing these rules. Consider this, in your case you would might place a database machine in the Bastion that replicated just that information needed for the website. You could also have an application server in the Bastion request information from a DB server in the stockade. In any case your public customers only access the DMZ and CAN'T EVER access the Bastion, much less the Stockade directly. Jim Davis > -Original Message- > From: Ian Skinner [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 08, 2003 5:43 PM > To: CF-Talk > Subject: RE: placing program logic away from web server? > > With the ever increasing predictability, this topic came up here. We are > finally upgrading our external website. One of the features, of course, > will be an employment section listing currently available positions. > > We already have an internal application that allows our HR department to > list positions as the become available on out intranet. Ideally, we would > use this same data on the external site. But they are very, Very, VERY > protective of our LAN and Databases. Something to do with us having lots > of > very personal medical information on these computers about lots of people. > So they are very cautious about opening holes in our protective shielding. > > Also, thanks to his over qualifications our IT/Network manager recently > moved onto greener pastures and has not yet been replaced. > > I would appreciate any good overview information understandable to myself, > a > simple ColdFusion developer, and other even less technically minded types > on > how one sets up these zones and the connections between them. Their > vulnerabilities, safety, concerns, ect. > > Thank You > > -- > Ian Skinner > Web Programmer > BloodSource > Sacramento, CA > > > -Original Message----- > From: William Bowen [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 08, 2003 12:34 PM > To: CF-Talk > Subject: Re: placing program logic away from web server? > > > > I don't know about SQL Server but Oracle uses 1521. > > 1433 for SQL Server, but I was actually referring to which port the Web > Server to App Server connection through the firewall would be (I've > already > got the Web/App Server connected to the SQL Server through the firewall > part > working). > > will > > > - Original Message - > From: "Sean A Corfield" <[EMAIL PROTECTED]> > To: "CF-Talk" <[EMAIL PROTECTED]> > Sent: Monday, July 07, 2003 10:42 PM > Subject: Re: placing program logic away from web server? > > > > On Monday, Jul 7, 2003, at 13:35 US/Pacific, William Bowen wrote: > > > well, since it is the CFMX server that calls the SQL server in a > > > standard > > > setup situation, I would assume that it would still be able to talk to > > > the > > > SQL Server in this configuration too, no? > > > > Correct. > > > > > I also have some questions regarding this scenario: What port would > > > one use? > > > > I don't know about SQL Server but Oracle uses 1521. > > > > > 1st web server group in Internet DMZ has application/web server > > > installed > > > and calls SQL Server group through firewall. > > > 2nd web server group in local DMZ (our campus only, essentially) has > > > web/application server installed, calls same SQL Server group as above > > > for > > > data. > > > 3rd web server group in third DMZ (company wide (and international) > > > but not > > > accessible from Internet) same setup as above. > > > > > > My question: Can web server groups in three different DMZs call same > > > application server group (in 4th DMZ) which then calls SQL Server > > > group? > > > &
RE: placing program logic away from web server?
How about this path. The data your HR put up on the intranet, gets replicated to a DB server for the external site. Now this would only be the data that isn't so personal information. If your using MS SQL you can setup job in SQL Agent to replicate the data needed for the outside world to access. Shawn Regan PTS -Original Message- From: Ian Skinner [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 2:43 PM To: CF-Talk Subject: RE: placing program logic away from web server? With the ever increasing predictability, this topic came up here. We are finally upgrading our external website. One of the features, of course, will be an employment section listing currently available positions. We already have an internal application that allows our HR department to list positions as the become available on out intranet. Ideally, we would use this same data on the external site. But they are very, Very, VERY protective of our LAN and Databases. Something to do with us having lots of very personal medical information on these computers about lots of people. So they are very cautious about opening holes in our protective shielding. Also, thanks to his over qualifications our IT/Network manager recently moved onto greener pastures and has not yet been replaced. I would appreciate any good overview information understandable to myself, a simple ColdFusion developer, and other even less technically minded types on how one sets up these zones and the connections between them. Their vulnerabilities, safety, concerns, ect. Thank You -- Ian Skinner Web Programmer BloodSource Sacramento, CA -Original Message- From: William Bowen [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 12:34 PM To: CF-Talk Subject: Re: placing program logic away from web server? > I don't know about SQL Server but Oracle uses 1521. 1433 for SQL Server, but I was actually referring to which port the Web Server to App Server connection through the firewall would be (I've already got the Web/App Server connected to the SQL Server through the firewall part working). will - Original Message - From: "Sean A Corfield" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Monday, July 07, 2003 10:42 PM Subject: Re: placing program logic away from web server? > On Monday, Jul 7, 2003, at 13:35 US/Pacific, William Bowen wrote: > > well, since it is the CFMX server that calls the SQL server in a > > standard > > setup situation, I would assume that it would still be able to talk to > > the > > SQL Server in this configuration too, no? > > Correct. > > > I also have some questions regarding this scenario: What port would > > one use? > > I don't know about SQL Server but Oracle uses 1521. > > > 1st web server group in Internet DMZ has application/web server > > installed > > and calls SQL Server group through firewall. > > 2nd web server group in local DMZ (our campus only, essentially) has > > web/application server installed, calls same SQL Server group as above > > for > > data. > > 3rd web server group in third DMZ (company wide (and international) > > but not > > accessible from Internet) same setup as above. > > > > My question: Can web server groups in three different DMZs call same > > application server group (in 4th DMZ) which then calls SQL Server > > group? > > Yes. Example: we have a load-balanced set of web servers in one 'zone' > connecting to a load-balanced set of app servers in a second 'zone' > connecting to Oracle DB servers in a third 'zone'. We also - for > testing purposes - have various web servers in various internal zones - > connecting to those app servers and we also have various DB tools > (again in different zones) connecting to those DB servers. > > Sean A Corfield -- http://www.corfield.org/blog/ > > "If you're not annoying somebody, you're not really alive." > -- Margaret Atwood > > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: placing program logic away from web server?
At 02:42 PM 7/8/2003 -0700, you wrote: >We already have an internal application that allows our HR department to >list positions as the become available on out intranet. Ideally, we would >use this same data on the external site. But they are very, Very, VERY >protective of our LAN and Databases. Something to do with us having lots of >very personal medical information on these computers about lots of people. >So they are very cautious about opening holes in our protective shielding. Is it set up so that your internal server can access the external server, if not vice versa? You might consider adjusting your internal HR app so that it will generate static HTML files - one for the list of positions, one for each position, for example - and then FTP those files out to the external box. Code your external app to snag these (now local) files when needed so that folks outside can see the current job openings. ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: placing program logic away from web server?
With the ever increasing predictability, this topic came up here. We are finally upgrading our external website. One of the features, of course, will be an employment section listing currently available positions. We already have an internal application that allows our HR department to list positions as the become available on out intranet. Ideally, we would use this same data on the external site. But they are very, Very, VERY protective of our LAN and Databases. Something to do with us having lots of very personal medical information on these computers about lots of people. So they are very cautious about opening holes in our protective shielding. Also, thanks to his over qualifications our IT/Network manager recently moved onto greener pastures and has not yet been replaced. I would appreciate any good overview information understandable to myself, a simple ColdFusion developer, and other even less technically minded types on how one sets up these zones and the connections between them. Their vulnerabilities, safety, concerns, ect. Thank You -- Ian Skinner Web Programmer BloodSource Sacramento, CA -Original Message- From: William Bowen [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 08, 2003 12:34 PM To: CF-Talk Subject: Re: placing program logic away from web server? > I don't know about SQL Server but Oracle uses 1521. 1433 for SQL Server, but I was actually referring to which port the Web Server to App Server connection through the firewall would be (I've already got the Web/App Server connected to the SQL Server through the firewall part working). will - Original Message - From: "Sean A Corfield" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Monday, July 07, 2003 10:42 PM Subject: Re: placing program logic away from web server? > On Monday, Jul 7, 2003, at 13:35 US/Pacific, William Bowen wrote: > > well, since it is the CFMX server that calls the SQL server in a > > standard > > setup situation, I would assume that it would still be able to talk to > > the > > SQL Server in this configuration too, no? > > Correct. > > > I also have some questions regarding this scenario: What port would > > one use? > > I don't know about SQL Server but Oracle uses 1521. > > > 1st web server group in Internet DMZ has application/web server > > installed > > and calls SQL Server group through firewall. > > 2nd web server group in local DMZ (our campus only, essentially) has > > web/application server installed, calls same SQL Server group as above > > for > > data. > > 3rd web server group in third DMZ (company wide (and international) > > but not > > accessible from Internet) same setup as above. > > > > My question: Can web server groups in three different DMZs call same > > application server group (in 4th DMZ) which then calls SQL Server > > group? > > Yes. Example: we have a load-balanced set of web servers in one 'zone' > connecting to a load-balanced set of app servers in a second 'zone' > connecting to Oracle DB servers in a third 'zone'. We also - for > testing purposes - have various web servers in various internal zones - > connecting to those app servers and we also have various DB tools > (again in different zones) connecting to those DB servers. > > Sean A Corfield -- http://www.corfield.org/blog/ > > "If you're not annoying somebody, you're not really alive." > -- Margaret Atwood > > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: placing program logic away from web server?
> I don't know about SQL Server but Oracle uses 1521. 1433 for SQL Server, but I was actually referring to which port the Web Server to App Server connection through the firewall would be (I've already got the Web/App Server connected to the SQL Server through the firewall part working). will - Original Message - From: "Sean A Corfield" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Monday, July 07, 2003 10:42 PM Subject: Re: placing program logic away from web server? > On Monday, Jul 7, 2003, at 13:35 US/Pacific, William Bowen wrote: > > well, since it is the CFMX server that calls the SQL server in a > > standard > > setup situation, I would assume that it would still be able to talk to > > the > > SQL Server in this configuration too, no? > > Correct. > > > I also have some questions regarding this scenario: What port would > > one use? > > I don't know about SQL Server but Oracle uses 1521. > > > 1st web server group in Internet DMZ has application/web server > > installed > > and calls SQL Server group through firewall. > > 2nd web server group in local DMZ (our campus only, essentially) has > > web/application server installed, calls same SQL Server group as above > > for > > data. > > 3rd web server group in third DMZ (company wide (and international) > > but not > > accessible from Internet) same setup as above. > > > > My question: Can web server groups in three different DMZs call same > > application server group (in 4th DMZ) which then calls SQL Server > > group? > > Yes. Example: we have a load-balanced set of web servers in one 'zone' > connecting to a load-balanced set of app servers in a second 'zone' > connecting to Oracle DB servers in a third 'zone'. We also - for > testing purposes - have various web servers in various internal zones - > connecting to those app servers and we also have various DB tools > (again in different zones) connecting to those DB servers. > > Sean A Corfield -- http://www.corfield.org/blog/ > > "If you're not annoying somebody, you're not really alive." > -- Margaret Atwood > > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: placing program logic away from web server?
On Monday, Jul 7, 2003, at 13:35 US/Pacific, William Bowen wrote: > well, since it is the CFMX server that calls the SQL server in a > standard > setup situation, I would assume that it would still be able to talk to > the > SQL Server in this configuration too, no? Correct. > I also have some questions regarding this scenario: What port would > one use? I don't know about SQL Server but Oracle uses 1521. > 1st web server group in Internet DMZ has application/web server > installed > and calls SQL Server group through firewall. > 2nd web server group in local DMZ (our campus only, essentially) has > web/application server installed, calls same SQL Server group as above > for > data. > 3rd web server group in third DMZ (company wide (and international) > but not > accessible from Internet) same setup as above. > > My question: Can web server groups in three different DMZs call same > application server group (in 4th DMZ) which then calls SQL Server > group? Yes. Example: we have a load-balanced set of web servers in one 'zone' connecting to a load-balanced set of app servers in a second 'zone' connecting to Oracle DB servers in a third 'zone'. We also - for testing purposes - have various web servers in various internal zones - connecting to those app servers and we also have various DB tools (again in different zones) connecting to those DB servers. Sean A Corfield -- http://www.corfield.org/blog/ "If you're not annoying somebody, you're not really alive." -- Margaret Atwood ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: placing program logic away from web server?
well, since it is the CFMX server that calls the SQL server in a standard setup situation, I would assume that it would still be able to talk to the SQL Server in this configuration too, no? I also have some questions regarding this scenario: What port would one use? is there a recommendation? I did not see one in the article. My second question regards multiple servers on different DMZ calling the same app server to serve pages. I suspect that re-reading the article will probably make this more clear, but maybe if somebody already knows the answer... Current setup: 1st web server group in Internet DMZ has application/web server installed and calls SQL Server group through firewall. 2nd web server group in local DMZ (our campus only, essentially) has web/application server installed, calls same SQL Server group as above for data. 3rd web server group in third DMZ (company wide (and international) but not accessible from Internet) same setup as above. My question: Can web server groups in three different DMZs call same application server group (in 4th DMZ) which then calls SQL Server group? will - Original Message - From: "Freddys Garcia" <[EMAIL PROTECTED]> To: "CF-Talk" <[EMAIL PROTECTED]> Sent: Monday, July 07, 2003 1:11 PM Subject: placing program logic away from web server? > Very interesting. Thanks for the link. I'm going to look more into distributed mode. > > Does CFMX have the ability to call web pages and CFC's through the firewall? I didn't ask earlier, but I assume that it can also access our SQL server which is on the private side of our firewall. Is that assumption correct? > -Freddys > ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: placing program logic away from web server?
> Does CFMX have the ability to call web pages and CFC's > through the firewall? I didn't ask earlier, but I assume > that it can also access our SQL server which is on the > private side of our firewall. Is that assumption correct? I'm not sure what you mean by "call web pages", but you can put all of your CFM and CFC files on the application server, and if the machine on which the application server is running can get to your SQL Server, then yes, CF will be able to do this also. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Re: placing program logic away from web server?
Web Services... -- jon mailto:[EMAIL PROTECTED] Monday, July 7, 2003, 3:40:35 PM, you wrote: GF> Hi everybody, GF> Fairly new to CFMX, so sorry if this question is obvious, but I've been GF> slowly but surely pushing for the use of CFMX where I work, an insurance GF> company. I've been giving my boss more examples about web apps that would GF> be improved and easier to maintain then what we currently have and so far he GF> has been impressed, but today he asked me a question that I didn't have an GF> answer for right away. GF> He wanted to know if it was possible to access CFMX program logic across a GF> firewall. The application architecture we use has our web servers in the GF> DMZ, and for our web servers to access our app servers (Magic App Servers), GF> we opened up some ports on the firewall. This way, no logic resides on the GF> web servers, and if they were compromised, no major damage could be done. GF> I'm assuming this could be done somehow with CFMX. Would somebody be kind GF> enough to direct me to some information on this type of environment? Do they GF> cover this type of stuff in the advanced WACK book? GF> Thanks in advance, GF> Freddys ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: placing program logic away from web server?
> He wanted to know if it was possible to access CFMX program > logic across a firewall. The application architecture we use > has our web servers in the DMZ, and for our web servers to > access our app servers (Magic App Servers), we opened up > some ports on the firewall. This way, no logic resides on > the web servers, and if they were compromised, no major damage > could be done. I'm assuming this could be done somehow with > CFMX. As Mike Brunt described, you can place the application server on a different machine using Distributed Mode. However, it's worth noting that this will not protect you from all web/application server security issues - it will simply prevent anyone from modifying your scripts. Distributed Mode won't, for example, protect your application against attacks involving manipulated data, such as SQL injection attacks. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
RE: placing program logic away from web server?
This is called running in the "Distributed Mode". Here is an MM article for this on CFMX. http://www.macromedia.com/support/coldfusion/administration/cfmx_in_distributed_mode/ Hth. Kind Regards - Mike Brunt Original Message --- Hi everybody, Fairly new to CFMX, so sorry if this question is obvious, but I've been slowly but surely pushing for the use of CFMX where I work, an insurance company. I've been giving my boss more examples about web apps that would be improved and easier to maintain then what we currently have and so far he has been impressed, but today he asked me a question that I didn't have an answer for right away. He wanted to know if it was possible to access CFMX program logic across a firewall. The application architecture we use has our web servers in the DMZ, and for our web servers to access our app servers (Magic App Servers), we opened up some ports on the firewall. This way, no logic resides on the web servers, and if they were compromised, no major damage could be done. I'm assuming this could be done somehow with CFMX. Would somebody be kind enough to direct me to some information on this type of environment? Do they cover this type of stuff in the advanced WACK book? Thanks in advance, Freddys ~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
