RE: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-15 Thread Boyle Owen
-Original Message- From: Justin Pasher [mailto:just...@newmediagateway.com] Many others have provided some information, but here's a basic summary (assuming no SNI support): (a) Single FQDN, single DocumentRoot - Single IP. (b) Multiple FQDN, single DocumentRoot - Single IP,

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-15 Thread Peter Schober
* Boyle Owen owen.bo...@six-group.com [2009-12-15 10:22]: -Original Message- From: Justin Pasher [mailto:just...@newmediagateway.com] (a) Single FQDN, single DocumentRoot - Single IP. (b) Multiple FQDN, single DocumentRoot - Single IP, assuming cert supports all (sub)domains

[us...@httpd] Calculating settings for mpm-worker/mod_proxy_ajp/Tomcat

2009-12-15 Thread Chris Jölly
Hello, can anybody tell me how to adjust the different min/max settings for the MPM worker, mod_proxy_ajp and Tomcat connector so that the configuration is aligned and there is no miss configuration on either side? On Tomcat's side i use the default value for the AJP connector of

RE: [us...@httpd] Calculating settings for mpm-worker/mod_proxy_ajp/Tomcat

2009-12-15 Thread Chris Jölly
-Original Message- From: Eric Covener [mailto:cove...@gmail.com] Sent: Dienstag, 15. Dezember 2009 13:06 To: users@httpd.apache.org Subject: Re: [us...@httpd] Calculating settings for mpm- worker/mod_proxy_ajp/Tomcat On Tue, Dec 15, 2009 at 5:43 AM, Chris Jölly

Re: [us...@httpd] Questions about implementing SSL/VirtualHosts

2009-12-15 Thread Dan Schaefer
Peter Schober wrote: * Boyle Owen owen.bo...@six-group.com [2009-12-15 10:22]: -Original Message- From: Justin Pasher [mailto:just...@newmediagateway.com] (a) Single FQDN, single DocumentRoot - Single IP. (b) Multiple FQDN, single DocumentRoot - Single IP, assuming cert supports

[us...@httpd] Using SSLCipherSuite to restrict to faster cipher algorithms

2009-12-15 Thread François Beaune
Hello, I have a setup where Apache 2.2.3 is serving a large SVN repository with WebDAV over HTTPS (using basic authentication). Everything is working correctly; I would simply like to force usage of faster cipher algorithms (trading some security in favor of speed) than what seems to be allowed

[us...@httpd] Enabling SSL on a virtual host

2009-12-15 Thread Jonathan Mast
I have a single webserver (1 IP) to which many DNS entries point to. Up till now I've haven't needed SSL and the following config pattern has worked fine for me: VirtualHost * ServerName foo.mysite.com ... /VirtualHost VirtualHost * ServerName bar.mysite.com ... /VirtualHost However, when I

Re: [us...@httpd] Enabling SSL on a virtual host

2009-12-15 Thread Eric Covener
On Tue, Dec 15, 2009 at 10:48 AM, Jonathan Mast jhmast.develo...@gmail.com wrote: So my question is, how do I configure the VirtualHost to allow HTTP traffic (port 80) and HTTPS traffic (443)? You need two virtualhosts, one with SSL and one without. If you want everything other than SSL to be

Re: [us...@httpd] Enabling SSL on a virtual host

2009-12-15 Thread Jonathan Mast
I'm thinking that the host name actually is required in the VirtualHost declaration. But the 2 separate VirtualHost entries worked, thanks On Tue, Dec 15, 2009 at 10:53 AM, Eric Covener cove...@gmail.com wrote: On Tue, Dec 15, 2009 at 10:48 AM, Jonathan Mast jhmast.develo...@gmail.com wrote:

[us...@httpd] Request Counting algorithm

2009-12-15 Thread ricardo figueiredo
Hi, I was trying to implement Round Robin in mod_proxy, but I realized that Request Counting is like as Round Robin when all values of lbfactor are equal. Is That right ??? -- Thank you Ricardo

Re: [us...@httpd] Request Counting algorithm

2009-12-15 Thread André Warnier
ricardo figueiredo wrote: Hi, I was trying to implement Round Robin in mod_proxy, but I realized that Request Counting is like as Round Robin when all values of lbfactor are equal. Is That right ??? That sounds like a valid deduction. It don't think that it is necessarily of the same level

Re: [us...@httpd] Request Counting algorithm

2009-12-15 Thread ricardo figueiredo
Althrough, I did some tests and measuring the actives connections. The distribuition of requests doesn't equal. For example: A B C D 120 158 138 117 Using RR would be: A B C D 125 127 124 126 I think

Re: [us...@httpd] Request Counting algorithm

2009-12-15 Thread Eric Covener
On Tue, Dec 15, 2009 at 12:20 PM, ricardo figueiredo ricardoogra...@gmail.com wrote: Althrough, I did some tests and measuring the actives connections. The distribuition of requests doesn't equal. For example: A          B           C           D 120      158       138       117 Using RR

Re: [us...@httpd] Request Counting algorithm

2009-12-15 Thread Jim Jagielski
Almost, but not quite. RR says go to the next one in the list, no matter if it was just the last one to return whereas the request counting one factors that in... So even though after a period of time all will share 1/4 of the load, the ordering in which they share it will not be the same. On Dec

Re: [us...@httpd] Using SSLCipherSuite to restrict to faster cipher algorithms

2009-12-15 Thread Justin Pasher
François Beaune wrote: Hello, I have a setup where Apache 2.2.3 is serving a large SVN repository with WebDAV over HTTPS (using basic authentication). Everything is working correctly; I would simply like to force usage of faster cipher algorithms (trading some security in favor of speed)

[us...@httpd] best way to modify a URL

2009-12-15 Thread Oliver Schoenborn
I have a simple problem: the URL root for a client website we are setting up is http://foo.com/bar/*, but our client wants access to be it via http://dodo.foo.comhttp://qun.foo.com/*, how would I set this up? I have used mod_proxy in the past for something similar but this doesn't seem to be

Re: [us...@httpd] best way to modify a URL

2009-12-15 Thread André Warnier
Oliver Schoenborn wrote: I have a simple problem: the URL root for a client website we are setting up is http://foo.com/bar/*, but our client wants access to be it via http://dodo.foo.comhttp://qun.foo.com/*, how would I set this up? I have used mod_proxy in the past for something similar

Re: [us...@httpd] best way to modify a URL

2009-12-15 Thread Justin Pasher
Oliver Schoenborn wrote: I have a simple problem: the URL root for a client website we are setting up is http://foo.com/bar/*, but our client wants access to be it via http://dodo.foo.com http://qun.foo.com/*, how would I set this up? I have used mod_proxy in the past for something similar

Re: [us...@httpd] rewriterules

2009-12-15 Thread Justin Pasher
Rabadan Palenque, Jose wrote: IfModule mod_rewrite.c RewriteEngine On RewriteRule ^/(.*) http://localhost:8080/VirtualHostBase/https/%{SERVER_NAME}:443/$1 [P] /IfModule This works fine. But now I need to put the apache on other server behind DMZ I thought that this work fine but

Re: [us...@httpd] Using SSLCipherSuite to restrict to faster cipher algorithms

2009-12-15 Thread François Beaune
Hey Justin, Thanks for your answer. I did add the various versions of the SSLCipherSuite directive to my virtual host container, sorry if that wasn't clear. In the meantime I found that, by inspecting the handshake between TortoiseSVN and Apache, the connection does use RC4, which is good.