[Zope] why run apache in front of zope?

Jamie Heilman jamie@audible.transient.net
Sat, 19 Oct 2002 21:26:37 -0700


Garry Galinsky wrote:
> This may be an obvious question to many, but not to me... why do so many
> people run Zope behind an Apache server?  What are the benefits of an
> Apache server, or otherwise, what are the limitations of the Zope web
> server?  I currently run Zope alone and am evaluating the benefits of
> use Apache.  Thanks.

Apache makes an attempt to be secure and offer the configurability
necessary to sanity check some of the requests it handles.  Currently,
ZServer doesn't try as hard.  As such, Apache (or other suitable
frontends) tend to be safer in an untrusted environment assuming you
actually take the time to configure it properly.

-- 
Jamie Heilman                   http://audible.transient.net/~jamie/
"I was in love once -- a Sinclair ZX-81.  People said, "No, Holly, she's 
 not for you." She was cheap, she was stupid and she wouldn't load 
 -- well, not for me, anyway."				-Holly