The diagram below shows the proposed new configuration of glast-ground after meeting with SCCS, and working with the windows group to set it up.

Notes

  • The IIS web servers contain very little content (just "workbook" html pages), and no web applications. All real web applications live on the tomcat servers.
  • As recommented by Gary Buhrmaster we will use a cisco router as the redirector. A DNS name zglast-ground is currently pointing to this, and the alias glast-ground will be moved to point to it once this is ready for production.
  • All of the tomcat servers should be configured identically, except for the web applications they run. It is simple to move web applications manually from one server to another. Initially this will be enough to protect us against outages of the tomcat servers. (Eventually load-balancing/failover would be nice here too, but a lower priority and more complicated).
  • We need to support SSL connections to glast-ground (handled by loading the glast-ground certificate into both servers).
  • As recommended by windows group we use windows file replication service to duplicate html files (workbook) between servers.
  • IPTables will be used on glastlnx* to block offsite access to tomcat servers (and anything else running on ports 8000:8999).
  • No labels