Big number of Web server

Hello,

If you want to use ModSecurity in an environment where you
have a big
number of very different applications, what would be the
best approach ?

Would one reverse proxy (even on a good machine) be powerful
enough to
not slow down the system ?
Wouldn't it be better to have, for instance, one reverse
proxy for the
general things (maybe core rules), then another one (or the
module on
the Web server) for dedicated rules ?
Or another architecture ?

Does somebody have any metrics ?

Thanks

Marc



------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief
surveys-and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
mod-security-users mailing list
mod-security-userslists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-
security-users

Hi Marc,

On 4/6/07, Marc Stern <marc.sternapproach.be> wrote:
> Hello,
>
> If you want to use ModSecurity in an environment where
you have a big
> number of very different applications, what would be
the best approach ?
>
> Would one reverse proxy (even on a good machine) be
powerful enough to
> not slow down the system ?

How many web servers are we talking about? If there are many
than
having ModSecurity installed on a single reverse proxy box
would
probably be much easier to maintain. But you'll need at
least two
boxes at this layer to avoid a central point of failure.

As for performance - that depends entirely on the rate of
requests.
Properly sized I don't expect you'd have any problems.


> Wouldn't it be better to have, for instance, one
reverse proxy for the
> general things (maybe core rules), then another one (or
the module on
> the Web server) for dedicated rules ?
> Or another architecture ?
>
> Does somebody have any metrics ?
>
> Thanks
>
> Marc
>
>
>
>
------------------------------------------------------------
-------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the
chance to share your
> opinions on IT & business topics through brief
surveys-and earn cash
> http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> mod-security-users mailing list
> mod-security-userslists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/mod-
security-users
>


-- 
Ivan Ristic

------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief
surveys-and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
mod-security-users mailing list
mod-security-userslists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mod-
security-users