www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "jan iversen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-7655) Explore where there is a benefit to having SSL proxies cache content as well
Date Fri, 16 May 2014 11:24:38 GMT

    [ https://issues.apache.org/jira/browse/INFRA-7655?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13998692#comment-13998692

jan iversen commented on INFRA-7655:


2 bare metal hosts with ubuntu setup as redundant (hot standby). The hosts dont need much
disk space, but plenty of RAM and preferable 2 set of network cards.

The host should have ATS installed.

ATS is configured as proxy and cache for HTTPS sites:
> HTTPS traffic terminated in the host
> HTTP traffic (for HTTPS sites) is permanently redirected to HTTPS:
> Traffic to the VMS is sent as HTTPS with a self signed certificate.

For medium/high volume HTTP sites: 
> HTTP traffic is cached in ATS
> Traffice to the vms is sent as HTTP.

The second hosts is configured as hot-standby, that takes over in case of failure. Since the
host only has configuration data, hot-standby is easy. In case of a failover the ATS Cache
is lost.

+ Caching at point of entry (minimum network traffic)
+ Lower load of VMS, and reduced load on sql server
+ Easy to signal "proxy down" or "site down"
+ Traffic monitoring is centralized (resource management)
- Hardware cost (2 new phys. hosts, could be 1U servers so space demand is low)
- A lot of work is needed to get this up and running.

Now time for comments?

> Explore where there is a benefit to having SSL proxies cache content as well
> ----------------------------------------------------------------------------
>                 Key: INFRA-7655
>                 URL: https://issues.apache.org/jira/browse/INFRA-7655
>             Project: Infrastructure
>          Issue Type: Task
>          Components: Website
>            Reporter: David Nalley
>            Assignee: jan iversen
> We have a number of SSL proxies that front end a number of our web properties. Is it
worth having the SSL proxies also cache content? This might mitigate short term outages, or
allow faster response from overloaded services. 

This message was sent by Atlassian JIRA

View raw message