Load balancing with the Apache http server
Another typical configuration is used to support sticky sessions:
BalancerMember http://server6:1080... stickysession=JSESSIONID
The stickysession parameter, combined with the name of a cookie supported by the back ends, means that requests originating with individual users are always sent to the same back-end server.
This kind of limited distribution ensures the persistence of the requests, but it does interfere with the actual task of load balancing.
To forward information to the back-end servers in a targeted way, or to influence communications with the the back end, the proxy module also supports custom environmental variables and http headers, which you can use to restrict the connections to the back end or to advertise the use of SSL:
SetEnv proxy-nokeepalive 1 ... RequestHeader set Front-End-Https "On"
A number of standard variables and headers, such as proxy-nokeepalive, proxy-sendcl, X-Forwarded-For, or X-Forwarded-Server, saves typing and makes life easier for administrators.
Other modules support caching or filtering of content generated by the back ends. In addition to improving performance, caching also reduces the overall traffic volume and generally offloads some of the work from the back-end servers. Listing 2 enables a simple, file-based cache, including compression, for the whole URL space /. (Just to demonstrate how the exclusion feature works, the whole URL space below /users has been excluded.)
mod_cache Sample Configuration
01 CacheEnable disk / 02 CacheDisable /users 03 CacheRoot /var/cache/httpd 04 ... 05 AddOutputFilterByType DEFLATE text/html
If you loaded the status module (mod_status) when you launched the server, the proxy module also provides a simple but practical web interface (Figure 2). The simple configuration involves assigning a handler:
<Location "/.balancer-manager"> SetHandler balancer-manager </Location> ... ProxyPass /.balancer-manager !
However, it is important to take access control into consideration and to exclude processing individual URLs within the load balancer, which is achieved by means of a negative ProxyPass command. If you use the Apache rewrite module (mod_rewrite), you can define a separate rule to handle this case.
Management is restricted to viewing the status of all configured balancers, disabling individual pool members, or modifying some basic settings, but it is extremely useful if you encounter a problem, or if you wish to monitor multiple load balancers.
Buy this article as PDF
HP's annual Cyber Risk report offers a bleak look at the state of IT.
But what do the big numbers really mean?
.NET Core execution engine is the basis for cross-platform .NET implementations.
The Xnote trojan hides itself on the target system and will launch a variety of attacks on command.
Spammers go low-volume, and 90% of IE browsers are unpatched.
Adobe scrambles to release patches for vulnerable Flash Player.
Four-inch-long computer on a stick lets you boot a full Linux system from any HDMI display device.
New statute would require companies to report break-ins to consumers.
Weird data transfer technique avoids all standard security measures.
FIDO alliance declares the beginning of the end for old-style login authentication.