You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Andrew Hodgson <An...@allpay.net> on 2007/11/09 16:53:33 UTC
[users@httpd] Looking for Windows based commercial LAMP setup
Hi,
All our other LAMP setups are using RHEL4/5, but I have one PHP based app which uses some Windows middleware, and thus we are using Apache for Windows.
However, I have issues with HTTPD running under Windows, because I have had instances where upgrading one of the components (usually as a result of a security update), has updated something else which breaks the application, so the security updates sometimes gets missed until we can do another QA cycle.
What I am looking for is a LAMP type setup under Windows, which uses similar security update techniques as RedHat/other Linux distros out there, i.e., backporting the security fixes into the current release. The app uses PHP and Tomcat.
Any suggestions?
Thanks.
Andrew.
--
Andrew Hodgson,
Network Controller,
Allpay.net Limited.
--
allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, Hereford, HR1 3SE.
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88.
Telephone: 0870 243 3434, Fax: 0870 243 6041.
Website: www.allpay.net
Email: enquiries@allpay.net
This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom it is addressed. If you have received this email in error please notify the allpay.net Information Security Manager at the number above.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Michael McGlothlin <mi...@swplumb.com>.
>>> All our other LAMP setups are using RHEL4/5, but I have one PHP based app which uses some Windows middleware, and thus we are using Apache for Windows.
>>>
>> Can you configure, or rewrite, the PHP app to call the Windows
>> middleware remotely? That might be the easiest solution.
>>
> That is an idea I already have - to somehow implement it as a web
> service. I think it depends on the workload required - whether it is
> more time to do this, source an alternative middleware app, or rewrite
> the whole thing in .net and rely on Microsoft security updates :).
Some of our systems run in Windows and we connect to them as a service.
The most important of these is a commercial app that works with IIS to
expose itself (woo) with an XML interface which we then wrap and expose
as XML-RPC. It's not as stable as our LAMP servers but it is reasonably
robust. If it's an in-house middleware app then I'd probably suggest a
more lightweight solution and just write your own network interface.
Rewriting the whole app is probably not needed.
--
Michael McGlothlin
Southwest Plumbing Supply
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Foo JH <jh...@extracktor.com>.
> Does anyone know the actual status of HTTPD on Windows as a production
> server? I know lots of people use it, but I have seen articles (and
> so have others in the company) which suggest it is designed as a
> development platform, and not really intended as a production ready
> server.
>
Windows + Apache is as production ready as any Linux box. What you're
probably more interested in is performance, which then points to the
kind of code you write. For example, modperl ppl use different coding
strategies for linux-based apache compared to Windows-based apache
largely because of the libraries that take advantage of the linux
framework.
But that does not mean Windows + Apache is not production ready. You may
want to understand how exactly Apache is going to work for you.
> Andrew.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by "William A. Rowe, Jr." <wr...@rowe-clan.net>.
Andrew Hodgson wrote:
>
> Does anyone know the actual status of HTTPD on Windows as a production
> server? I know lots of people use it, but I have seen articles (and
> so have others in the company) which suggest it is designed as a
> development platform, and not really intended as a production ready
> server.
That's absolutely true of 1.3 - threading was bubble gum and bailing wire,
nobody's modules every expected to run in threads, and it was built on MS
Posix API's which are poor man's abstractions of win32 api, which is itself
a sometimes poor abstraction of the NT kernel ;-) And cygwin? Worse by
far in implications.
So 2.0 was built on top of Win32, but in a manner that's quite equivalent
to the unix implementation. Yes it's single process, multi threaded, but
so can unix be - so module authors must factor in the possibility. It can
certainly stand improvement, optimization, tuning and even more dynamic
MPM behavior. So can Unix (to a lesser extent).
Yes, if you are going to use httpd/win32 for production, use 2.0 or 2.2,
don't even look at 1.3, and be especially alert for some windows fixes
coming down the pike in the next 2.0/2.2 releases.
Bill
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Andrew Hodgson <an...@allpay.net>.
On Fri, 9 Nov 2007 09:52:15 -0700, you wrote:
>
>> All our other LAMP setups are using RHEL4/5, but I have one PHP based app which uses some Windows middleware, and thus we are using Apache for Windows.
>>
>Can you configure, or rewrite, the PHP app to call the Windows
>middleware remotely? That might be the easiest solution.
That is an idea I already have - to somehow implement it as a web
service. I think it depends on the workload required - whether it is
more time to do this, source an alternative middleware app, or rewrite
the whole thing in .net and rely on Microsoft security updates :).
Does anyone know the actual status of HTTPD on Windows as a production
server? I know lots of people use it, but I have seen articles (and
so have others in the company) which suggest it is designed as a
development platform, and not really intended as a production ready
server.
Andrew.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Michael McGlothlin <mi...@swplumb.com>.
> All our other LAMP setups are using RHEL4/5, but I have one PHP based app which uses some Windows middleware, and thus we are using Apache for Windows.
>
Can you configure, or rewrite, the PHP app to call the Windows
middleware remotely? That might be the easiest solution.
--
Michael McGlothlin
Southwest Plumbing Supply
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Tom Hart <to...@coopfed.org>.
Tom Hart wrote:
> Andrew Hodgson wrote:
>> What I am looking for is a LAMP type setup under Windows, which uses
>> similar security update techniques as RedHat/other Linux distros out
>> there, i.e., backporting the security fixes into the current
>> release. The app uses PHP and Tomcat.
Also, this page may help http://en.wikipedia.org/wiki/Comparison_of_WAMPs
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Tom Hart <to...@coopfed.org>.
Andrew Hodgson wrote:
>> Andrew Hodgson wrote:
>>
>>> What I am looking for is a LAMP type setup under Windows, which uses similar security update techniques as RedHat/other Linux distros out there, i.e., backporting the security fixes into the current release. The app uses PHP and Tomcat.
>>>
> I really need stability with security updates!
>
Windows and stability/security? Would you like a cherry pie covered in
gravy with that?
The truth of the matter is that if you're looking for stability and
security, and you need more than apache 2.2 for windows and server 2003
can give you, then perhaps another point of attack is in order. You
didn't leave us a lot of specifics about the "windows middleware" but
there's almost got to be a way to accomplish what you're trying to do
without running a web server on your windows machine, especially if you
have some tasty rhel boxes already running it.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Andrew Hodgson <an...@allpay.net>.
On Fri, 9 Nov 2007 11:19:39 -0500, you wrote:
>Andrew Hodgson wrote:
>> What I am looking for is a LAMP type setup under Windows, which uses similar security update techniques as RedHat/other Linux distros out there, i.e., backporting the security fixes into the current release. The app uses PHP and Tomcat.
>>
>If you googled for even 5 seconds, you would have found this already,
>but just in case you didn't
>
>http://www.wampserver.com/
>
>WAMP server is a php/mysql/apache package for windows (built on the same
>idea as lamp, except for windows of course) and I've had pretty decent
>success with it. I'm not sure about their security update techniques,
>these guys just seem to pack the newer versions of each piece when their
>released, but if you're looking for WAMP, this is definitely worth a look.
I had already seen it, and several others:
http://en.wikipedia.org/wiki/Comparison_of_WAMPs
However, the ones on this list either seem to update the actual
program (not doing the backports), or are long since dead, especially
the one or two that are marked as comercial.
I really need stability with security updates!
Andrew.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Looking for Windows based commercial LAMP setup
Posted by Tom Hart <to...@coopfed.org>.
Andrew Hodgson wrote:
> What I am looking for is a LAMP type setup under Windows, which uses similar security update techniques as RedHat/other Linux distros out there, i.e., backporting the security fixes into the current release. The app uses PHP and Tomcat.
>
If you googled for even 5 seconds, you would have found this already,
but just in case you didn't
http://www.wampserver.com/
WAMP server is a php/mysql/apache package for windows (built on the same
idea as lamp, except for windows of course) and I've had pretty decent
success with it. I'm not sure about their security update techniques,
these guys just seem to pack the newer versions of each piece when their
released, but if you're looking for WAMP, this is definitely worth a look.
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org