On Sat, 14 Dec 2002, Phil Steitz wrote:
> Date: Sat, 14 Dec 2002 16:41:13 -0700 > From: Phil Steitz <[EMAIL PROTECTED]> > Reply-To: Struts Users Mailing List <[EMAIL PROTECTED]> > To: Struts Users Mailing List <[EMAIL PROTECTED]> > Subject: Re: Struts application & infrastructure choices > > Craig R. McClanahan wrote: > > > > On Sat, 14 Dec 2002, David Graham wrote: > > > > > >>Date: Sat, 14 Dec 2002 13:23:40 -0700 > >>From: David Graham <[EMAIL PROTECTED]> > >>Reply-To: Struts Users Mailing List <[EMAIL PROTECTED]> > >>To: [EMAIL PROTECTED] > >>Subject: Re: Struts application & infrastructure choices > >> > >> > >>It should be fairly easy to implement this and do some performance testing. > >>Your DAOs will be the only piece that changes to use RMI. You might try > >>just using straight sockets because RMI is another layer on top of sockets > >>which may slow you down. > >> > > > > > > A completely different approach to consider would be running something > > like Apache in the DMZ, and put Tomcat behind the firewall as well. Then, > > you could continue to use your existing DAOs without exposing them on the > > DMZ machine. > > > That's what I meant by my option 1. After skimming > http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/jk.html, I now > see that Apache->Tomcat does in fact work remotely. Right? Yes. Detailed discussion is off topic here -- see the Tomcat docs and/or ask questions on TOMCAT-USER for more information. > Are there > problems pushing JK through firewalls? You just need to make sure that your firewall configuration allows the connection from the DMZ machine to the back-end machine, using the port number you specify. For additional security, you should configure the back-end server to *only* accept connections from the appropriate DMZ server's IP address. Craig -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
