I re-read my own responses. It looks like some context has not come across in the non-interative nature of email.
I myself agree that common practice is not the same as best practice, though in my experience as a developer + sysadmin for the past few years, it is indeed ideal to separate the serving of static content from the service of application responses. -- Sriram On Sat, Jun 11, 2011 at 1:30 PM, Sriram Narayanan <sriram...@gmail.com> wrote: > On Sat, Jun 11, 2011 at 1:14 AM, Christopher Schultz > <ch...@christopherschultz.net> wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> Sriram, >> >> On 6/10/2011 1:49 PM, Sriram Narayanan wrote: >>> Having one application serve static content, and having other >>> applications serve other content (accept http requests, perform some >>> processing, and send back responses, for e.g.), is actually a widely >>> accepted and tested mechanism of using various stacks for various >>> tasks. >> >> Sure, but it's not always necessary. More moving parts when they aren't >> necessary just results in tougher management and greater opportunity for >> security mistakes. >> > > For those that need it, this is what is done. Phrases such as "moving > parts", etc give the impression that it's all going to be very > complicated when it's not. > >>> In fact, the vast majority of websites out there specifically stick in >>> proxies and such in front of tomcat for SSL termination, load >>> balancing, and static content serving. >> >> I'm not sure I would say "the vast majority", but certainly many are. >> There's no need to give the impression that some other web server in >> front of Tomcat is a best practice: it's merely a common practice. >> > > This is not giving an impression. There's a reason that this is common > practice. > >> - -chris >> -----BEGIN PGP SIGNATURE----- >> Version: GnuPG v1.4.10 (MingW32) >> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ >> >> iEYEARECAAYFAk3ydCIACgkQ9CaO5/Lv0PDRRACfeZ7jW2zSaKy6yf+CZejb46JX >> DSUAoJbNc3ZABf/19X5fjQveE4MjAbDh >> =KY1q >> -----END PGP SIGNATURE----- >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org >> For additional commands, e-mail: users-h...@tomcat.apache.org >> >> > > > > -- > ================== > Belenix: www.belenix.org > -- ================== Belenix: www.belenix.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
