Local or Remote Web Server

--------------------------------

Can someone please lead me to some documentation on security repercussions of setting up a local web server vice a remote web server for a WAS production environment?

--------------------------------

Posted By: TGIBONEY at Dec 16 2009 10:03PM

I cannot think of any major difference between the local and remote web servers. you can set up security and its very well documented.
httpd.apache.org/docs/2.2/misc/security_...

Is there a specific issue you are trying to solve?

I personally prefer a remote web server which is out side of DMZ.

Anant

--------------------------------

Posted By: infyniti at Dec 21 2009 12:11AM

Infyniti thanks for the response

We have always had our web servers local to our WAS because we use a Cisco Content Service Switch that faces the public outside of our DMS and serves our certificates and performs load balancing. This was done by my predecessor and I have maintained it until recently we were told during a demo that it’s a security risk but I can’t find any documentation.

--------------------------------

Posted By: TGIBONEY at Dec 23 2009 1:42PM

More of a question really. I'm new here. I have question about Cisco Load Balancing and WebSphere JSESSIONID. We have a WAS Cluster (2 servers) and we have not configured a web server. Instead we are only using a Cisco Load balancer for...well...load balancing the requests. The App Servers merely host a simple invoice application. The issue we are facing is that requests are not being properly routed and it looks like the Cisco Load Balacner might be having an issue with the JSESSION IDs. It looks like without the Cisco Load balancer the requests are being routed fine to the servers (we use Wire Shark to captue the packet info). But once Cisco comes into the equation, performance degrades and the traffic is just not being properly routed to app servers. Has anybody faced this issue before?