Since pound makes the SSL'ing of legacy web admin tools easy (and possible),
I'm setting up a box dedicated to this. Currently I am proxying 12
web apps, with 12 instances of pound with configurations similar to:

User nobody
Group nobody
LogLevel 2

ListenHTTPS 12.12.12.12,443 /var/www/pound/certs/foo.pem
        Alive 15
        UrlGroup ".*"
        BackEnd 192.168.1.100,8080,1
EndGroup


This is working perfectly, but I am wondering if there is something I
should be doing differently. Is there a limit of pound instances that I will
reach as I continue to add to this machine? Any tips?

        --jordan

On Monday 18 October 2004 16.40, Jordan Lederman wrote:[...]

The only limit is the amount of RAM in your machine - multiple instances use a 
bit more memory than multiple Listen directives.

What you may consider is if you really need so many instances. Something like 
the following may be useful:

ListenHTTPS 12.12.12.11,443 /var/www/pound/certs/foo.pem
ListenHTTPS 12.12.12.12,443 /var/www/pound/certs/bar.pem

UrlGroup ".*"
    HeadRequire Host ".*www.foo.com.*"
    BackEnd 192.168.1.100,8080,1	# server for foo.com
EndGroup

UrlGroup ".*"
    HeadRequire Host ".*www.bar.com.*"
    BackEnd 192.168.1.101,8080,1	# server for bar.com
EndGroup

This assumes www.foo.com resolves to 12.12.12.11 and www.bar.com to 
12.12.12.12, so that requests would only come there and be met with the 
correct certificate.[...]

On Tue, Oct 19, 2004 at 08:53:33AM +0200, Robert Segall wrote:[...]

Robert,
	What would this provide me over the current setup besides the ability
to group multiples into one? Would this affect performance, given that the
machine
is decently powered (Dual P3, 1G ram)? Also, does the option to add arbitray
headers 
(and values of these headers) exist, such as the opposite of HeadRemove?
	--jordan

On Wednesday 20 October 2004 18.26, Jordan Lederman wrote:[...]

Performance would not be affected (at least not much). You may gain something 
if your machine is right at the limit.

There is no option to add arbitrary headers right now.[...]