RE: [cas-dev] CAS and Network Architecture

2012-12-20 Thread Domazlicky, Eric
specific content, like ASP.NET, while Tomcat can serve your Java Servlets. -Original Message- From: Marvin Addison [mailto:marvin.addi...@gmail.com] Sent: Thursday, December 20, 2012 7:32 AM To: cas-dev@lists.jasig.org Subject: Re: [cas-dev] CAS and Network Architecture > What do you th

Re: [cas-dev] CAS and Network Architecture

2012-12-20 Thread Alexandre DE PELLEGRIN
My little contribution to this post. I think you can't think about only one CAS server. Since CAS is your Single Sign On, it is also your single point of failure. I've got 4 CAS instanced in production behind a secured load balancer. So, my opinion is that you can't put your CAS in front of intern

Re: [cas-dev] CAS and Network Architecture

2012-12-20 Thread Marvin Addison
> What do you think about putting my server in front of Internet? I used to put > my webserver behind my ISA Server and in this case, I have problem to put the > same certificat on ISA Server and Tomcat. If you're asking whether Microsoft ISA server adds any security value to your CAS deployment

RE: [cas-dev] CAS and Network Architecture

2012-12-20 Thread KLEIN Emmanuel (Info)
have problem to put the same certificat on ISA Server and Tomcat. -Message d'origine- De : Marvin Addison [mailto:marvin.addi...@gmail.com] Envoyé : jeudi 20 décembre 2012 16:02 À : cas-dev@lists.jasig.org Objet : Re: [cas-dev] CAS and Network Architecture > I would like to know what

Re: [cas-dev] CAS and Network Architecture

2012-12-20 Thread Marvin Addison
> I would like to know what are the best practices or best network > architecture I have to build around my server which hosts Tomcat and CAS ? If you intend to build a HA CAS solution I have two high level recommendations: 1. Strive for simplicity 2. Use a real hardware load balancer/application