Mailing List Archive

--0F1p//8PRICkK4MW
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

> Is mod_backhand a good way to reverse proxy an
> internal web site to the outside world??

Absolutely! ... but only if you're running backhand on the internal
machine(s) as well.

> I need to allow some external access to only the web
> service on an internal(fake ip) machine limiting
> acceess to a certain directory tree and required
> authentication at the external web server.
> Is this a job for mod_backhand or should I be looking
> at something else??

Squid might be a better option, but backhand certainly works
(and works well).

> (there is only one internal machine to serve the
> pages).

If you want the pages cached, use squid. If you don't: use=20
backhand. I suppose a 3rd option would be mod_proxy, but if you're=20
going to use that, just use backhand. -sc


--
Sean Chittenden

--0F1p//8PRICkK4MW
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Comment: Sean Chittenden <sean@chittenden.org>

iEYEARECAAYFAjuC40UACgkQn09c7x7d+q37kwCgwjE9k3KVGg7Y2hlcubkbEW73
7UIAn37VdsXWgIgXWAxAA/Q4/Kq+hAwm
=HvSI
-----END PGP SIGNATURE-----

--0F1p//8PRICkK4MW--

Hi Sean,

I am curious to know what advantage you see for mod_backhand compared with mod_proxy
in this case.

Cheers,

:) Yair.

Sean Chittenden wrote:
>
> > Is mod_backhand a good way to reverse proxy an
> > internal web site to the outside world??
>
> Absolutely! ... but only if you're running backhand on the internal
> machine(s) as well.
>
> > I need to allow some external access to only the web
> > service on an internal(fake ip) machine limiting
> > acceess to a certain directory tree and required
> > authentication at the external web server.
> > Is this a job for mod_backhand or should I be looking
> > at something else??
>
> Squid might be a better option, but backhand certainly works
> (and works well).
>
> > (there is only one internal machine to serve the
> > pages).
>
> If you want the pages cached, use squid. If you don't: use
> backhand. I suppose a 3rd option would be mod_proxy, but if you're
> going to use that, just use backhand. -sc
>
> --
> Sean Chittenden
>
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Part 1.2Type: application/pgp-signature

--hHWLQfXTYDoKhP50
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

> I am curious to know what advantage you see for mod_backhand compared wit=
h mod_proxy
> in this case.=20

Wickedly nifty cool stats man! ::grin::

Seriously, it's actually useful for preventing people from
calling in false alarms. Write a hack to bugzilla that fetches the
backhand-handler status and warns that they should expect extreme
flamage from the SA department if the server is in fact up (w/ stats to
prove it). ;~) If server's up, then there isn't a network issue. The
other reason being that I just assume use backhand everywhere and not
use proxy (caching for dynamic content doesn't make sense). -sc

--=20
Sean Chittenden

--hHWLQfXTYDoKhP50
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Comment: Sean Chittenden <sean@chittenden.org>

iEYEARECAAYFAjuD5L0ACgkQn09c7x7d+q35WgCgxwxkQxmIeixWwtonaAT1NbFn
jbgAoIcu5QO8H0ynym0a0mW0hdfev72U
=hucB
-----END PGP SIGNATURE-----

--hHWLQfXTYDoKhP50--