tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Antonio Fiol BonnĂ­n <fiol.bon...@terra.es>
Subject Re: Would this work? (Load Balance Question)
Date Thu, 20 Nov 2003 07:34:05 GMT
We do that, with a firewall in front of the Apache, and one behind it, 
in front of the TC and DB.

BTW: It works ;-)

Antonio

Andreas Mohrig wrote:

>Dave,
>
>although I have never set up such a configuration, I have thought about it
>quite a lot. This is exactly the thing I would try and I'm pretty much
>convinced that it should work. It is even quite attractive from a security
>point of view, because neither your tmocat servers nor your database-server
>get any chance to expose some services/ports to the whole wide world
>(provided you disable routing on your webserver). 
>
>Of course you would need a switch on the internal network, but that could
>even be a gigabit-switch to remove at least one bottleneck.
>
>Greetings
>
>Andreas Mohrig
>
>-----Original Message-----
>From: David O'Brien [mailto:dobrien@naccrra.org]
>Sent: Tuesday, November 18, 2003 5:34 PM
>To: tomcat-user@jakarta.apache.org
>Subject: Would this work? (Load Balance Question)
>
>
>I have one apache web server conversing with two separate tomcat servers 
>with access a fourth MySql server.
>
>Could I set it up like this?
><pre>
>                  The Internet
>                   |
>                   |
>          (real IP addresses)
>    ------ External Network --------
>    |
>   ---       ---        ---       ---
>   | |       | |        | |       | |
>   |W|       |T|        |T|       |M|
>   |W|       |C|        |C|       |Y|
>   |W|       | |        | |       |S|
>   | |       |1|        |2|       |Q|
>   | |       | |        | |       |L|
>   | |       | |        | |       | |
>   ---       ---        ---       ---
>    |         |          |         |
>    ------- Internal Network -------
>             (192.168.0. addresses)
></pre>
>All the machines have 2 nics on board. I am worried that the other external 
>network traffic
>is slowing my response time, So I'd like to separate the backend processing 
>from the
>external network.
>
>-Dave
>
>
>
>David G. O'Brien
>Web Services Coordinator / Systems Administrator
>
>NACCRRA
>The Nation's Network of Child Care Resource & Referral
>1319 F Street NW, Suite 500
>Washington, DC 20004
>(202) 393-5501 ext. 113
>(202) 393-1109 fax
>
>  
>


Mime
View raw message