Mongrel and SSL?

Rails
1

I have a small intranet app with only 20 or so users.

I’m currently using lighttpd w/ssl for production and mongrel for dev.

I don’t think Mongrel supports ssl, but what is the easiest front-end
to put in front of it? Pound?

Thanks
Greg

Greg F.
The Norcross Group
Forensics for the 21st Century

2

i’d say apache… known-to-work and stable

2006/8/10, Greg F. [email protected]:

–
Greg F.
The Norcross Group
Forensics for the 21st Century

Rails mailing list
[email protected]
http://lists.rubyonrails.org/mailman/listinfo/rails

–
Michael S. [email protected]

www.stellar-legends.de - Weltraum-Browsergame im Alpha-Stadium

3

On Thu, 2006-08-10 at 16:46 -0400, Greg F. wrote:

I have a small intranet app with only 20 or so users.

I’m currently using lighttpd w/ssl for production and mongrel for dev.

I don’t think Mongrel supports ssl, but what is the easiest front-end
to put in front of it? Pound?

Both Pound and Pen support SSL. The Pound instructions on the Mongrel
site:

http://mongrel.rubyforge.org/docs/pound.html

Give instructions for doing SSL setups. You can probably copy the key
gen instructions and use Pen as well.

–
Zed A. Shaw

http://mongrel.rubyforge.org/
http://www.railsmachine.com/ – Need Mongrel support?

4

Hi Greg – fancy seeing you here!

Pound is very easy, but as always it’s probably whatever you’re more
comfortable with. Apache setup is, if you’ve done it a few times, not
terribly hard either.

The line you’ll be using is ProxyPass and apache must be compiled with
mod_proxy for that to work.

When you want to proxy-balance between mongrel_clusters you’ll have to
make the jump up to apache 2.1.0 or above (2.2.2 is out and stable)
and use mod_proxy_balancer

Good luck!

On 8/10/06, Greg F. [email protected] wrote:

Greg F.
The Norcross Group
Forensics for the 21st Century

Rails mailing list
[email protected]
http://lists.rubyonrails.org/mailman/listinfo/rails

–
Charles Brian Q.
self-promotion: www.seebq.com
highgroove studios: www.highgroove.com
slingshot hosting: www.slingshothosting.com

5

Hey Charles,

I’m leaning towards pound just because Apache can be a bit of a bear.
I’ve used it several times so I’m not afraid of it, but I’m only
serving a couple thousand requests a day at most. I’m just looking
for the simpleist thing I can use.

The little research I’ve done talks about pound in front of a mongrel
cluster. That is truly overkill for my needs, but I’m not sure if
pound is only designed for load-balancing situations or if it is also
designed to just sit in front of a single mongrel instance and just do
the SSL encryption/decryption that I need.

FYI: I would stick with lighttpd, but for some reason after a recent
upgrade from SuSE 10 to 10.1 it no longer autostarts at bootup.
Rather than troubleshoot that, I thought I would move to Mongrel for
production.

Greg

guess my qOn 8/11/06, Charles Brian Q. [email protected] wrote:

make the jump up to apache 2.1.0 or above (2.2.2 is out and stable)

I don’t think Mongrel supports ssl, but what is the easiest front-end
[email protected]
Rails mailing list
[email protected]
http://lists.rubyonrails.org/mailman/listinfo/rails

–
Greg F.
The Norcross Group
Forensics for the 21st Century

6

On Fri, 2006-08-11 at 11:27 -0400, Greg F. wrote:

The little research I’ve done talks about pound in front of a mongrel
cluster. That is truly overkill for my needs, but I’m not sure if
pound is only designed for load-balancing situations or if it is also
designed to just sit in front of a single mongrel instance and just do
the SSL encryption/decryption that I need.

No, Pound can be used for just SSL. The additional advantage is when
you have to add an extra Mongrel you just increase a number in
mongrel_cluster and add one more backend line in your pound config then
restart.

That’s scalability. Start small, expand as you need.

–
Zed A. Shaw

http://mongrel.rubyforge.org/
http://www.railsmachine.com/ – Need Mongrel support?

7

Thanks Zed,

I will try to get that working tomorrow.

Greg

On 8/11/06, Zed S. [email protected] wrote:

mongrel_cluster and add one more backend line in your pound config then

Rails mailing list
[email protected]
http://lists.rubyonrails.org/mailman/listinfo/rails

–
Greg F.
The Norcross Group
Forensics for the 21st Century

8

On Aug 11, 2006, at 7:32 AM, Charles Brian Q. wrote:

When you want to proxy-balance between mongrel_clusters you’ll have to
make the jump up to apache 2.1.0 or above (2.2.2 is out and stable)
and use mod_proxy_balancer

2.2.3 is out and stable, too. :slight_smile:

–
– Tom M.