Do you want separate isolated code in each virtual server, or would you want shared code? Supposedly the sample-config.tcl file that comes with AOLserver4 has an example.

Bart,

Thanks a bunch, I'd love to see that document when it comes out. It's not too urgent for us, we're fine with running good ol' patched version of 3.3.1-ad13, but we do want to switch to AOLserver 4 as soon as it's possible. So please do finish up that document.

I'm pretty happy with the constellation we have now where we can start individual AOLserver instances and they live completely separate lives.

However they do tend to eat up a lot of memory each, so maybe the built-in AOLserver 4 solution is actually better?

I really don't know which is the best way to go, which is why I'm looking forward to that document, and seeking advice :)

/Lars

...which reminds me. How does the way of aolserver 4 virtual hosting  play together with APM which automatically stops the server process when a new package has been installed?

Hi, Bart:

I have downloaded the final version of aolserver 4 and I want to try the virtual hosting capabilities.

1. Do you have any sample config file you could send me? There is not documentation I could find about this.

2. Cite  'I plan to write an article about my virtual hosting research'. Do you take the time to do so?

3. Could you give me some advice about using 'nsvhr' instead? I'm reading http://borkware.com/rants/aolserver-vhosting/

4. Another experiences apart from Bart?

Thanks for your help.

/Jorge

Jorge,

I haven't found the time to write down my experiences. Neither have I found a perfect solution. But here's a synopsis of what I've learned so far (all with AOLserver 4.x):

- The build in virtual hosting doesn't allow you to start and stop individual virtual servers. A major drawback in a development environment. Neither does it support HTTPS virtual hosting (with a wildcard certificate).

- nssock/nsvhr works well for HTTP connections but like the build in virtual hosting it doesn't support HTTPS virtual hosting. And all requests to your virtual hosts will be recorded with the IP address of the proxy. The patch listed at  http://borkware.com/rants/aolserver-vhosting/ doesn't work for  AOLserver 4.x.

- Squid reverse proxy does support HTTPS virtual hosting, including multiple sub-domains with a wildcard certificate. But squid is incapable of passing on to the backend server whether or not the incoming request is on a secure port or not.

- Pound is currently my favorite proxy even though it still can't handle streaming pages. Pound supports HTTPS virtual hosting. Pound can tell OpenACS whether the incoming connection is on a secure port. With a small patch to OpenACS it allows OpenACS to handle those connections as secure connections just like direct HTTPS connections to the backend server.

/Bart

Bart, one more thing.

You say Pound supports HTTPS virtual hosting, but I was reading the Pound webpage at http://www.apsis.ch/pound/index.html and this is what I found.

>>>>>

Virtual Hosts and HTTPS

Quite often we get inquiries about Pound's ability to do virtual hosting with HTTPS. In order to lay this matter to rest, let me say:

    HTTPS does not allow virtual hosting

This is not a limitation of Pound, but of HTTPS - no Web server or proxy are able to do it due to the nature of the beast.
<<<<<

Have you find the method to achieve this?

Could you then share a config file or some additional explanation?.

Thank you again.

/Jorge

Ok. I understand now.

I see there exist a mailing list for Pound, but there exist a cvs access or some other link who could be of interest?.

/Jorge

Ok. I understand.

I'll wait for your patch, Bart :)

/Jorge

Jerry,

if you analyze the AOLserver log of AOLserver 4.0 then you don't have to do anything extra as this version of the web server logs the X-Forwarded-for IP address in the log.

/Bart

The best resource that I have come across was an article written by Jerry Asher. I have been using his patched version of nsunix for well over a year now with no problems. His site is no longer active but he is a member of the community. I suggested on another thread that he might consider making his instructions available on Jade's articles section on the openacs.org front page. In any event you could try dropping him a line to ask for a copy or see if google still has it cached.

Regards
Richard