简体繁体 English

mod_jk或mod_proxy_ajp用于集群tomcat和ssl

[英]mod_jk or mod_proxy_ajp for clustering tomcat and ssl

原文 2010-03-24 08:53:50 4 3 java/ tomcat/ apache

Please tell me what is better in supporting clustering and ssl between mod_jk and mod_proxy_ajp. 请告诉我在mod_jk和mod_proxy_ajp之间支持群集和ssl有什么好处。

Thank you. 谢谢。

3 个解决方案

Regarding SSL, it should not make any difference if you use mod_jk or mod_proxy_ajp. 关于SSL，如果使用mod_jk或mod_proxy_ajp，它应该没有任何区别。 Especially if you offload SSL in apache and not in tomcat, the transport between httpd <-> tomcat (mod_jk/mod_proxy_ajp) would not be affected. 特别是如果你在apache而不是在tomcat中卸载SSL，httpd < - > tomcat（mod_jk / mod_proxy_ajp）之间的传输不会受到影响。

As mod_proxy_ajp is the newer solution (that grew out of mod_jk), the general advice would be to go for mod_proxy_ajp (at least I'd use this one). 由于mod_proxy_ajp是较新的解决方案（由mod_jk构成），一般的建议是去mod_proxy_ajp（至少我会使用这个）。

Cheers, Martin 干杯，马丁

PS: mod_jk and mod_proxy_ajp are load-balancing solutions. PS：mod_jk和mod_proxy_ajp是负载平衡解决方案。 clustering is more referring to the part where sessions are replicated between several cluster nodes. 群集更多是指在多个群集节点之间复制会话的部分。

看看这个FAQ 。

I would say, session replication is one aspect of clustering, and clustering also to do with how a client is dispatched certain instence (one tomcat instance) of a cluster, that is load balancing. 我会说，会话复制是集群的一个方面，集群也与客户端如何调度集群的某些功能（一个tomcat实例）有关，即负载平衡。

A cluster should be see from outsite as one sinlge entry point, and hence, there are good reasons to have SSL handling in a central loation, we call this "ssloffloading" or "ssl termination" at load balancer / apache. 应该从外部看一个集群作为一个sinlge入口点，因此，有充分的理由在中央loation中进行SSL处理，我们在负载均衡器/ apache上称之为“ssloffloading”或“ssl终止”。

More info about ssloffloading see this post: http://milestonenext.blogspot.de/2012/09/ssl-offloading-with-modjk-part-1.html 有关ssloffloading的更多信息，请参阅此帖子： http ：//milestonenext.blogspot.de/2012/09/ssl-offloading-with-modjk-part-1.html