09 April, 2006

tools you might need some day: pound

pound is a really neat, simple and efficient tool following the principal: do only one thing, and do it good. we use it on this server to distribute requests to different backend apache/jboss/whatever servers. it is easy to configure, works with whatever http-server on whatever platform and seems rock-stable.

from the pound website:
WHAT POUND IS:
  1. a reverse-proxy: it passes requests from client browsers to one or more back-end servers.
  2. a load balancer: it will distribute the requests from the client browsers among several back-end servers, while keeping session information.
  3. an SSL wrapper: Pound will decrypt HTTPS requests from client browsers and pass them as plain HTTP to the back-end servers.
  4. an HTTP/HTTPS sanitizer: Pound will verify requests for correctness and accept only well-formed ones.
  5. a fail over-server: should a back-end server fail, Pound will take note of the fact and stop passing requests to it until it recovers.
  6. a request redirector: requests may be distributed among servers according to the requested URL.

Pound is a very small program, easily audited for security problems. It can run as setuid/setgid and/or in a chroot jail. Pound does not access the hard-disk at all (except for reading the certificate file on start, if required) and should thus pose no security threat to any machine.

0 Comments:

Post a Comment

Links to this post:

Create a Link

<< Home