www-infrastructure-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "jan iversen (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (INFRA-7655) Explore where there is a benefit to having SSL proxies cache content as well
Date Fri, 16 May 2014 11:24:38 GMT

    [ https://issues.apache.org/jira/browse/INFRA-7655?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13998692#comment-13998692
] 

jan iversen commented on INFRA-7655:
------------------------------------

Proposal:

2 bare metal hosts with ubuntu setup as redundant (hot standby). The hosts dont need much
disk space, but plenty of RAM and preferable 2 set of network cards.

The host should have ATS installed.

ATS is configured as proxy and cache for HTTPS sites:
> HTTPS traffic terminated in the host
> HTTP traffic (for HTTPS sites) is permanently redirected to HTTPS:
> Traffic to the VMS is sent as HTTPS with a self signed certificate.

For medium/high volume HTTP sites: 
> HTTP traffic is cached in ATS
> Traffice to the vms is sent as HTTP.

The second hosts is configured as hot-standby, that takes over in case of failure. Since the
host only has configuration data, hot-standby is easy. In case of a failover the ATS Cache
is lost.


Advantages:
+ Caching at point of entry (minimum network traffic)
+ Lower load of VMS, and reduced load on sql server
+ Easy to signal "proxy down" or "site down"
+ Traffic monitoring is centralized (resource management)
- Hardware cost (2 new phys. hosts, could be 1U servers so space demand is low)
- A lot of work is needed to get this up and running.

Now time for comments?

> Explore where there is a benefit to having SSL proxies cache content as well
> ----------------------------------------------------------------------------
>
>                 Key: INFRA-7655
>                 URL: https://issues.apache.org/jira/browse/INFRA-7655
>             Project: Infrastructure
>          Issue Type: Task
>          Components: Website
>            Reporter: David Nalley
>            Assignee: jan iversen
>
> We have a number of SSL proxies that front end a number of our web properties. Is it
worth having the SSL proxies also cache content? This might mitigate short term outages, or
allow faster response from overloaded services. 



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message