Re: Setting up a virtual hosting machine w. SSH/SFTP accounts - pitfalls/experiences?

Stuart Henderson wrote:
> On 2007/07/08 15:30, Chris Cappuccio wrote:
>> Stuart Henderson [stuspacehopper.org] wrote:
>>> Or use different ports and proxy them based on
host headers rather
>>> than burning IP addresses (for some RIR you are
expected not to use
>>> IP addresses for non-SSL virtual web hosting).
>>>
>>> I haven't checked, but hoststated should be
able to do this.
>> What software would you run on port 80 to break out
the requests to the
>> various apache instances?  Squid with accelerator
mode seems like a massive
>> beast to use for this purpose.  Any smaller apps?
> 
> I thought you may already be able to use hoststated but
I was mistaken.
> The least intrusive way to add it there may be to
provide a new action
> that matches on the Host: header and allows the table
name to be over-
> ridden (obviously this is only any good with relay, not
PF tables).
> 
> Other than that, it looks like Apache mod_proxy
(ProxyPass) can be
> configured per-virtual-host so that should work.
> 
> http://www.apsis.ch/pound/
 is another option but I don't know how
> well it works on OpenBSD. I think I've seen it run
here, but I don't
> know if it really works well.
> 
> Varnish can probably do this too, but doesn't run here
at all.
> (It's a bit of an unusual app...)
> 

I can vouch that Pound works very well on OpenBSD, and is
very BSD-like
in its style and philosophy, the developers aiming of
simple, readable,
provable code doing a specific job well.

-- 

Richard 'Dave' Wilson
Systems Administrator

Senokian Solutions Ltd.
Business Innovation Centre,
Binley Business Park, Coventry,
United Kingdom
CV3 2TX
T: +44 (0)24 76 233 400
DDI: +44 (0)24 76 233 416
F: +44 (0)24 76 233 401

For a handy pound port see:

http://folesvaert.no/poun
d/


/Pete


On 9 Jul 2007, at 4:59 PM, Richard Wilson wrote:

> Stuart Henderson wrote:
>> On 2007/07/08 15:30, Chris Cappuccio wrote:
>>> Stuart Henderson [stuspacehopper.org] wrote:
>>>> Or use different ports and proxy them based
on host headers rather
>>>> than burning IP addresses (for some RIR you
are expected not to use
>>>> IP addresses for non-SSL virtual web
hosting).
>>>>
>>>> I haven't checked, but hoststated should be
able to do this.
>>> What software would you run on port 80 to break
out the requests  
>>> to the
>>> various apache instances?  Squid with
accelerator mode seems like  
>>> a massive
>>> beast to use for this purpose.  Any smaller
apps?
>>
>> I thought you may already be able to use hoststated
but I was  
>> mistaken.
>> The least intrusive way to add it there may be to
provide a new  
>> action
>> that matches on the Host: header and allows the
table name to be  
>> over-
>> ridden (obviously this is only any good with relay,
not PF tables).
>>
>> Other than that, it looks like Apache mod_proxy
(ProxyPass) can be
>> configured per-virtual-host so that should work.
>>
>> http://www.apsis.ch/pound/
 is another option but I don't know how
>> well it works on OpenBSD. I think I've seen it run
here, but I don't
>> know if it really works well.
>>
>> Varnish can probably do this too, but doesn't run
here at all.
>> (It's a bit of an unusual app...)
>>
>
> I can vouch that Pound works very well on OpenBSD, and
is very BSD- 
> like
> in its style and philosophy, the developers aiming of
simple,  
> readable,
> provable code doing a specific job well.
>
> -- 
>
> Richard 'Dave' Wilson
> Systems Administrator
>
> Senokian Solutions Ltd.
> Business Innovation Centre,
> Binley Business Park, Coventry,
> United Kingdom
> CV3 2TX
> T: +44 (0)24 76 233 400
> DDI: +44 (0)24 76 233 416
> F: +44 (0)24 76 233 401
>



Pete Vickers

petesystemnet.no |  +47 48 17 91 00

SystemNet AS