Apache2.2/mod_shib and proxying to remote app servers

Cantor, Scott cantor.2 at osu.edu
Tue Mar 18 13:35:13 EDT 2014


On 3/18/14, 1:20 PM, "Simon Gaeremynck" <gaeremyncks at gmail.com> wrote:

>However, the docs [2] clearly state that you should not rely on this
>feature and use environment variables instead. I¹m not entirely sure how
>that would work when the application can¹t run under CGI and is based on
>an event-loop (ie: no threads/process to start up for each request).

If you proxy, you have to use headers. And you make sure that nothing else
can ever, ever, under any circumstances, get in between. Practically
speaking, a lot of organizations are happy to deploy proxies, and not
terribly effective at addressing the latter.

>Is there anything obvious that I¹m missing here or is the setup as we
>have it accepted when dealing with these type of applications?

The only one who can really answer that is you and your organization, it's
a risk question, really.

-- Scott




More information about the users mailing list