Tag Info

Hot answers tagged

21

The question doesn't provide specific information about load, features needed etc, so as such any answer is at best a guess. Pound is a good choice for smaller / midsized sites. It offers HTTPS support and easy setup. HAproxy can scale to saturate 10G Ethernet pipes, and offers connection limiting, i.e. sending only the number of simultaneous requests to ...


13

According to the episode 27 of the StackOverflow podcast, the Reddit guys really seem to like HAProxy. Here's a brief tutorial showing HAProxy being used with Amazon's EC2. You can find much more information at the HAProxy web site.


5

It depends on your application and tolerance for failures. If you are running an oracle database for a financial business, you want expensive servers with hot-swappable parts and built-in redundancy (power supplies, disks, even cpu and memory). If it's a web server or compute servers with NAS storage, go cheap (on the server, not the NAS) as long as you ...


5

<%windir%>Microsoft.NET/Framework/v3.0/Windows Communication Foundation/ServiceModelReg.exe -i ...then <%windir%>Microsoft.NET/Framework/v2.0.50727/aspnet_regiis -i -enable This mapped the proper isapi dll's to the *svc extension, among other things. Bless Microsoft...


5

Performance varies according the the filesystem you're using. FAT: forget it :) (ok, I think the limit is 512 files per directory) NTFS: Althought it can hold 4billion files per folder, it degrades relatively quickly - around a thousand you will start to notice performance issues, several thousand and you'll see explorer appear to hang for quite a while. ...


4

There is no really precise definition of these terms, but very roughly speaking: a web server is a program that serves content (HTML, images, etc) to browsers, i.e. to be read by humans a web service is a service that can be accessed via HTTP (the same protocol a web server uses), typically an API to be used by programs So the difference is the ...


4

200 million page views on a page that's almost half a meg in size, connects to fifteen different databases, and the application is written on Rails? Woof. The first issue you're going to run into is that a 400kb page is obscene. Serverfault's main page, with it set to display 50 questions per page, is 19k. CNN.com runs a whopping 21k, images and all. To ...


4

The question comes down to what does your server have to spare -- CPU or bandwidth? If you're constantly waiting for the network but your CPU is idle, then you probably should be looking into compression. If your CPU is busy but you're not sending much data, then compression probably isn't for you. XML is a very verbose (and more importantly, repetitive) ...


4

Ports <= 1024 are typically reserved as "well known ports", meaning that they are used for commodity services which are commonly used. These services often are run in higher security contexts. Browsers don't typically block anything without help from another entity. When you get a "blocked" message from your browser it usually means that there's a ...


4

I set SecRequestBodyAccess Off for now and that solved all problems.


4

PHP-FPM doesn't (as far as I know) speak http, it speaks fastcgi. A web browser therefore can't talk to it directly -- you need to have something like nginx in between to convert http requests to fastcgi requests.


3

I ran into the same exact issue. SecRequestBodyNoFilesLimit was the reason. it was not used in my config at all, but it does have a default value, 1048576. Once I found that this setting existed, I set it larger than my files and everything is working. Here is the documentation ...


3

Do you load your site on a single server? If not, I would presume you have some sort of load balancer.. If you do load on a single server, scale out and install a load balancer.. The joys of having such a service allow you to not only be highly available, but should you need to work on your application you can disable one of the servers from accepting ...


3

Have you verified that you can actually connect to port 8000 from the localhost? On the machine it's hosted on, can you open the web page on http://:8000? If that works, then you verified that the service is actually running and it's not an issue with the Android device or the connection between the two. You can use a port scanner or netstat to verify on ...


3

Short: NLB doesn't care. NLB doesn't give a rat's donkey about your application. User-mode problem are so user-mode. As long as the network is able to send and receive NLB broadcasts (or multicasts!), NLB will keep on accepting traffic. Longer: NLB really doesn't care. NLB runs as a Layer 2 NDIS filter, and simply runs its hash algorithm across all ...


3

Well, first off, is there a way that you can re-work the XMLRPC server to be able to handle multiple simultaneous requests? Having multiple web sessions depend on a service that can only do one request at a time is probably NOT going to cut it for use in the real world. An internal corporate site with low traffic might get away with it, but in the real ...


3

LVS - Linux Virtual Server, http://www.linuxvirtualserver.org/, This is The ONE! L2LB - Layer 2 Load Balacing, http://code.google.com/p/l2lb/, This is the one that I've implemented! :)


3

haproxy works well as does LVS. FWIW, wordpress.com uses nginx as their balancer/proxy.


3

Personally I recommend to my customers that computers that need to be highly-reliable be name-brand computers with current, top-level support. I call it "Packled-level support" after the alien race in Star Trek, because you should be able to call a support line day or night and say I am $NAME at $COMPANY. My support contract number is $X. My computer is a ...


3

If it's already on a load balanced farm, and you're getting too much load, and you've already optimised as much as you can, the natural next step would seem to be expanding your farm to meet demand.


2

The "ASPNET" user was last seen on Windows XP, it doesn't exist on Vista or Windows 7 because IIS hosts ASP.NET directly and just uses Network Service as the pool identity. Check your impersonation settings too. For simplicity, ensure that the "Anonymous Authentication" setting in IIS is bound to the Application Pool identity, and that the Site Basic ...


2

Before you even consider making changes you need to benchmark what's there already. Is it meeting its needs? If not, which part is falling short? So far you've not indicated if the current system is up to the task or not. The idea of just willy nilly throwing more hardware into the mix makes absolutely no sense unless you can demonstrate that the extra ...


2

The user you are connecting to Exchange web services with needs to have the rights to access the information in Exchange. I'm not sure what your trying to access, but for arguments sake let's assume it is a mailbox, then that user needs to have the rights to access that mailbox, if you only need read only access, then that is how they should be set up. This ...


2

I see nothing obviously wrong. You don't have any timeout which is bad, but this is unrelated. You should enable logging, it will tell you where the request spent time. For this, please use "option httplog" and "log 127.0.0.1 local0" then setup your syslogd to receive logs on the UDP socket (eg: syslogd -r). Hmmm yes there's something wrong in your config. ...


2

I can share some thoughts from what we are currently doing at the new Stack Overflow datacenter that might give you some ideas. There is a staging server to build to first as test. The staging server is a replica of all the production servers. When a new site is added, after testing I will sync the applicationhost.config with a simple powershell script. For ...


2

There is absolutely no point in using HTTPS if you don't encrypt the entire authenticated session. If any point you transmit the session id over an insecure channel then an attacker can use this to authenticate (Like Firesheep). Further more you are violating OWASP a9. From a performance perspective the most expensive part of SSL is the initial handshake. ...


2

If your goal is only authenticity (and not confidentiality), the signature in the header, either from the client or server, or in both directions, can be used to verify that the bits received are from the sender. Note that if the signed content does not have a timestamp that is checked, it is vulnerable to simple replay which could enable someone in the ...


2

Install http://www.winpcap.org/windump/ on the server, and run it with the following flags: windump -w "C:\Temp\tcpdump.log" dst host {old IP address} dst port 80 You can leave the running for a day or so, then look at the log. Using -w will write out the raw packets, so that you can see exactly what is being sent (and thus, hopefully, what is sending it). ...


2

Despite this not being the place for it, the solution I ended up implementing is: I created a Zone in my network's DNS for somedomain.com and pointed thatservice.somedomain.com to the internal IP of the service, but had to also duplicate all of the DNS records that exist on somedomain.com publicly.



Only top voted, non community-wiki answers of a minimum length are eligible