Open Stack

On Fri, Aug 19, 2016 at 5:34 PM, John Dickinson <me at not.mn> wrote:

>
>
> On 17 Aug 2016, at 15:27, Nick Papadonis wrote:
>
> > comments
> >
> > On Wed, Aug 17, 2016 at 4:53 PM, Matthew Thode <
> prometheanfire at gentoo.org>
> > wrote:
> >
> >> On 08/17/2016 03:52 PM, Nick Papadonis wrote:
> >>
> >>> Thanks for the quick response!
> >>>
> >>> Glance worked for me in Mitaka.  I had to specify 'chunked transfers'
> >>> and increase the size limit to 5GB.  I had to pull some of the WSGI
> >>> source from glance and alter it slightly to call from Apache.
> >>>
> >>> I saw that Nova claims mod_wsgi is 'experimental'.  Interested in it's
> >>> really experimental or folks use it in production.
> >>>
> >>> Nick
> >>
> >> ya, cinder is experimental too (at least in my usage) as I'm using
> >> python3 as well :D  For me it's a case of having to test the packages I
> >> build.
> >>
> >>
> > I converted Cinder to mod_wsgi because from what I recall, I found that
> SSL
> > support was removed from the Eventlet server.  Swift endpoint outputs a
> log
> > warning that Eventlet SSL is only for testing purposes, which is another
> > reason why I turned to mod_wsgi for that.
>
> FWIW, most prod Swift deployments I know of use HAProxy or stud to
> terminate TLS before forwarding the http stream to a proxy endpoint (local
> or remote). Especially when combined with a server that has AES-NI, this
> gives good performance.


Thanks.  I'd be interested if anyone has done a performance comparison of
HAProxy vs mod_wsgi to terminate.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160819/2fb5fa20/attachment.html>