This page is to document the migration of IIS to nginx
Existing Servers And Host Names
| Web Server | IIS | Tomcat | Migration Status | Comments |
|---|---|---|---|---|
| glast-ground.slac.stanford.edu | glast-win01,glast-win02 | multiple | Migrated (11/16/2015) | |
| web08.slac.stanford.edu | web08 | This is unfortunately used directly by some EXO applications (/logbook a php application) | ||
| aida.freehep.org | web08 | scalnx-v03 | ||
| aidatld.freehep.org | web08 | scalnx-v03 | Up | |
| exo-data.slac.stanford.edu | web08 | exolnx-v01 | ||
| forum.freehep.org | web08 | N/A fudform application | Dead | Page is up, but forum may be down, returns a blank page (was fhforum.slac.stanford.edu) |
| heprep.freehep.org | web08 | scalnx-v03 | Up | |
| jas.freehep.org | web08 | scalnx-v03 | ||
| java.freehep.org | web08 | scalnx-v03 | ||
lcsim.org, www.lcsim.org | web08 | scalnx-v03 | lcsim.freehep.org exists as a host name, but the application appears to actually be www.lcsim.org | |
| lelaps.freehep.org | web08 | scalnx-v03 | Up | |
| lp99.freehep.org | web08 | Dead | Down, no DNS record- but IIS is still aware of the Application (checked via telnet web08 80: GET / HTTP/1.1\nHost: lp99.freehep.org\n\n) | |
| lsst-camera.slac.stanford.edu | web08 | lsstlnx-v01, scalnx-v05 (firefly) | Up | |
| pingerlod.slac.stanford.edu | web08 | scalnx-v06 | Up | |
portal.lsst-desc.org portal.lsstdesc.org | web08 | scalnx01 | Up | |
| sid.slac.stanford.edu | web08 | Dead | Points to exo portal? | |
| srs.slac.stanford.edu | web08 | scalnx-v01 | Up | |
| wired1.freehep.org | web08 | N/A (on web08) | Dead | Up |
| www.freehep.org | web08 | N/A (on web08) | Up | |
www-sld.slac.stanford.edu www-bes.slac.stanford.edu www-midas.slac.stanford.edu | web08 | N/A (on web08) | Up. Also has www-bes and www-midas, but they all serve the same page. | |
| www-sldnt.slac.stanford.edu | web08 | scalnx-v03/Also on web08? | Peter Rowson has been asking to get this working again. | scalnx-v03, just a blank page |
| xrdmon.slac.stanford.edu | web08 | Dead | Worker defined to be xrootd-mon, Not sure if this is on web08 or some other server? | |
wired4.freehep.org wired.freehep.org | web08 | scalnx-v03 | ||
| wired2.freehep.org | web08 | Dead | Points to web08. No record in IIS. Not sure how this one works? There is a directory on scalnx-v03 | |
| forum.linearcollider.org | web08 | N/A (web08) |
To Do List
nginx configuration workbook
Note: See SCA NGINX Configuration for information on actual configuration.
SSL Configuration
http://nginx.com/resources/admin-guide/nginx-ssl-termination/
Tomcat configuration
To take full advantage of nginx+ssl, I believe we need to setup Tomcat to use the RemoteIpValve:
https://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/valves/RemoteIpValve.html
An example is here:
http://kdl.nobugware.com/post/2010/02/12/nginx-ssl-tomcat-confluence
nginx page on configuring individual applications
http://wiki.nginx.org/JavaServers
PHP Applications
[List of PHP Applications here]
A Previous migration of fudforum:
Two potential solutions
- PHP applications on nginx reverse proxies
- PHP applications on another server (configured the same as Tomcat servers)
The second option potentially makes session handling easier.
Taylor has php54 option. I believe Taylor has a drupal option as well, but it may not suit our needs.
Necessary installs for PHP:
sudo yum install php54 php54-php-fpm php54-php-mysqlnd
Fudforum
Fudforum saves attachments to disk. I think we need to do an admin dump then import the dump into the new instance when it's done.