HTTP/SSL - Offload SSL

Tony Stevenson <[email protected]> Sat, 18 Feb 2012 19:10:43 +0000
Newsgroups gmane.comp.jakarta.repository
Message-ID <[email protected]>
Folks, 

Earlier today I flipped the DNS so that the repository.a.o now resolves the IP of the SSL offload VM on erebus. 
To connect to your VM (where nexus runs) you should connect to repository-vm.apache.org. 

I have not yet disabled httpd, nor have I configured the firewall on your VM, so that those folks with slow resolver caches are not kicked out. 

On Monday, I will however stop httpd and enable iptables on the VM so that access to the nexus http interface is restricted to the SSL VM. 

As part of the move over to the SSL VM we have moved away from from the Worker MPM to the Event MPM. 
-- 

Cheers,
Tony


---------------------------------------
Tony Stevenson

[email protected]  //  [email protected]
[email protected]

http://blog.pc-tony.com

GPG - 1024D/51047D66
--------------------------------------"
signature.asc (application/pgp-signature, 238 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: GPGTools - http://gpgtools.org

iEYEARECAAYFAk8/97MACgkQyceSTlEEfWaeZQCeJp5E2uBK7pVYaTlgXlAvYyda
oI8An1zVEuyXVDUkeHDl3P+GUsQSGybU
=qAuA
-----END PGP SIGNATURE-----