LVS
lvs-users
Google
 
Web LinuxVirtualServer.org

Advice on security: Servers at port 80 or LVS-DR redirect 80 to 8080?

To: <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Advice on security: Servers at port 80 or LVS-DR redirect 80 to 8080?
From: <jpcl@xxxxxxxxxxxxxx>
Date: Tue, 11 Mar 2003 18:25:30 -0000 (WET)
Im' in the process of setting up a JBoss cluster using LVS-DR as the
frontend.

The LVS is performing great and now we are in some details like getting
everything to run at the standart web port 80 instead of the standart
JBoss port 8080.

So I'm wondering if there is any difference (in performance or security)
about these alternatives, that may inluence the decision:

* Solving at realserver level
a) Getting my servers to port 80
b) Redirecting my server port 80 to 8080

* Solving at director level
c) Balance port 80 and then redirect outgoing 80 to 8080
d) Redirecting port 80 to port 8080, and then balance.

I don't like a) for the following reason: Besides having to be root to run
at port 80 (here they actually don't care about that anyway), every time
we upgrade a server to a new version it's one more config file to
change... times the number of servers!

Any advice on this? Thank you
Joao Clemente


<Prev in Thread] Current Thread [Next in Thread>