Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: neutral (hermes.apache.org: local policy)
Date: Wed, 9 Feb 2005 19:14:37 +0100
From: "Anthony G. Atkielski" <anthony@atkielski.com>
Reply-To: users@httpd.apache.org
Message-ID: <1637321046.20050209191437@atkielski.com>
To: users@httpd.apache.org
In-Reply-To: <007b01c50ed1$78d054c0$ce0aa8c0@parrysound.com>
References: <0FF54EAC-7AC0-11D9-B134-000D933E3CEC@shire.net>
 <OF7E7BD40D.43131FA5-ONC1256FA3.00603C55-C1256FA3.0061259D@itcilo.org>
 <1310148301.20050209185121@atkielski.com>
 <007b01c50ed1$78d054c0$ce0aa8c0@parrysound.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Re: [users@httpd] Favorite Linux Distribution

Tim Burden writes:

> Well, you'll want a cron daemon, and an ssh daemon and maybe some other
> little handy things, but I certainly agree with this sentiment.

Sure, there are some things you'll probably want to run on any system.
But important stuff (things that will cause problems if they are
compromised or stop working) should be isolated elsewhere.

For example, if your Web server references a database to build pages for
output, the actual DBMS and database themselves should be on a different
machine.  The Web server is exposed to the Net.  The database server
sees only the Web server.  If your Web server is compromised, your
database is still likely to be safe, especially if the interface between
the two is restrictive, proprietary, and authenticated.

Other services can be similarly isolated.  Of course, you need hardware
resources for all this, but if you have the means, it's the way to go.

The idea of putting everything on a single machine seems to be very
popular, perhaps because so many people running servers today have only
PC desktop experience behind them. If budget constraints force you to
run everything on one machine, then there isn't much that can be done,
but if you have a choice, separate desktop and server, then separate the
server even further into separate services: Apache on one machine, BIND
on anothter, sendmail on another, your favorite DBMS on another, and so
on.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org