On Sat, Jun 11, 2011 at 1:14 AM, Christopher Schultz
<ch...@christopherschultz.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Sriram,
>
> On 6/10/2011 1:49 PM, Sriram Narayanan wrote:
>> Having one application serve static content, and having other
>> applications serve other content (accept http requests, perform some
>> processing, and send back responses, for e.g.), is actually a widely
>> accepted and tested mechanism of using various stacks for various
>> tasks.
>
> Sure, but it's not always necessary. More moving parts when they aren't
> necessary just results in tougher management and greater opportunity for
> security mistakes.
>

For those that need it, this is what is done. Phrases such as "moving
parts", etc give the impression that it's all going to be very
complicated when it's not.

>> In fact, the vast majority of websites out there specifically stick in
>> proxies and such in front of tomcat for  SSL termination, load
>> balancing, and static content serving.
>
> I'm not sure I would say "the vast majority", but certainly many are.
> There's no need to give the impression that some other web server in
> front of Tomcat is a best practice: it's merely a common practice.
>

This is not giving an impression. There's a reason that this is common practice.

> - -chris
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (MingW32)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk3ydCIACgkQ9CaO5/Lv0PDRRACfeZ7jW2zSaKy6yf+CZejb46JX
> DSUAoJbNc3ZABf/19X5fjQveE4MjAbDh
> =KY1q
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
> For additional commands, e-mail: users-h...@tomcat.apache.org
>
>



-- 
==================
Belenix: www.belenix.org

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to