使用Javascript安全地查询Solr

Question

I have a Solr server setup, working great, and sitting behind an Apache proxy server which limits access to a range of IP's.

To date our application(built in ZF/PHP) would use a PHP proxy function to query the Solr instance.(the ZF server's IP is allowed) however, I've been testing a new interface and have noticed querying Solr directly from JS is light-years faster than using PHP code to proxy things.

The page I'm testing runs 25+ solr queries per page load. Using pure JS this loads great, using PHP -not even close to usable.

Is there a way to proxy the client-side using jQuery or something much faster than PHP?

I've been searching for days, reading on various types of proxies, reverse proxies, securely querying webservices without exposing keys, etc.. But I'm still a bit lost as to the best way to query services using JS.

Any tutorials or advice would be much appreciated, cheers!

Answer 1

Why don´t you create a requestHandler which is designated to be directly called from the internet and make it accessible? (compare solrconfig.xml).

The Apache-Proxy could be configured to limit access to just this requestHandler (the URL of the requestHandler) and the requestHandler itself can be configured to add an implicit query (should be possible with an invariant fq-parameter).

If your update-requestHandler is not accessible it should be okay?!