Open Stack

On 17 Aug 2016, at 15:27, Nick Papadonis wrote:

> comments
>
> On Wed, Aug 17, 2016 at 4:53 PM, Matthew Thode <prometheanfire at gentoo.org>
> wrote:
>
>> On 08/17/2016 03:52 PM, Nick Papadonis wrote:
>>
>>> Thanks for the quick response!
>>>
>>> Glance worked for me in Mitaka.  I had to specify 'chunked transfers'
>>> and increase the size limit to 5GB.  I had to pull some of the WSGI
>>> source from glance and alter it slightly to call from Apache.
>>>
>>> I saw that Nova claims mod_wsgi is 'experimental'.  Interested in it's
>>> really experimental or folks use it in production.
>>>
>>> Nick
>>
>> ya, cinder is experimental too (at least in my usage) as I'm using
>> python3 as well :D  For me it's a case of having to test the packages I
>> build.
>>
>>
> I converted Cinder to mod_wsgi because from what I recall, I found that SSL
> support was removed from the Eventlet server.  Swift endpoint outputs a log
> warning that Eventlet SSL is only for testing purposes, which is another
> reason why I turned to mod_wsgi for that.

FWIW, most prod Swift deployments I know of use HAProxy or stud to terminate TLS before forwarding the http stream to a proxy endpoint (local or remote). Especially when combined with a server that has AES-NI, this gives good performance.

--John



>
> Nick
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160819/f6894ada/attachment.pgp>