(RT2) http and https on same server

Hi,

On an RT2 box (remember that?) is there a way to have both a SSL and
non-ssl version of RT running simultaneously? The etc/config.pm includes
the $WebBaseURL which I suspect will be overriding one or the other.

Anyone hacked this already?

Thanks,

Scott

This one time, at band camp, Scott A. McIntyre wrote:

On an RT2 box (remember that?) is there a way to have both a SSL and
non-ssl version of RT running simultaneously? The etc/config.pm includes
the $WebBaseURL which I suspect will be overriding one or the other.

Do you want different RTs running behind SSL and non-SSL, or the same RT?

jaq@spacepants.org http://spacepants.org/jaq.gpg

This one time, at band camp, Scott A. McIntyre wrote:

On an RT2 box (remember that?) is there a way to have both a SSL and
non-ssl version of RT running simultaneously? The etc/config.pm
includes the $WebBaseURL which I suspect will be overriding one or the
other.

Do you want different RTs running behind SSL and non-SSL, or the same RT?

Same RT – sorry about not being clear on that. The situation I’m trying
to discover is if there is a useful performance gain to RT2 by having
non-ssl sessions for a range of systems within a “trusted” network (more
physically trusted).

We’re not ready to migrate to RT3, but it looks like many of the blocking
factors for us are nearly removed on that, but we expect to use RT2 for a
few more months at least; so having a bit more speed increase would help.

(The system is a 4Gig of ram, quad xeon, with 100k tickets, MySQL/Innodb,
and all the optimisation that could be figured out on exchanges on the
rt-users/rt-devel lists – people still complain if a query/search takes
longer than two or three seconds to display the result on their
workstation).

Scott

Scott,

I’ve managed to gain same speed on RT3, like I had it on RT2, with same
hardware (p3 450, 320 mb of ram, mysql 4), tho I admit we have alot less
tickets (read 4200), but the hardware on which we’re running it is like
heaven that it runs so fast. Ow, only 3 users using it.

Hope this helps in any way.

Regards,
A.From: rt-users-admin@lists.fsck.com [mailto:rt-users-admin@lists.fsck.com]
On Behalf Of Scott A. McIntyre
Sent: Thursday, August 14, 2003 4:51 PM
To: Jamie Wilkinson; rt-users@lists.fsck.com
Subject: Re: [rt-users] (RT2) http and https on same server

This one time, at band camp, Scott A. McIntyre wrote:

On an RT2 box (remember that?) is there a way to have both a SSL and
non-ssl version of RT running simultaneously? The etc/config.pm
includes the $WebBaseURL which I suspect will be overriding one or the
other.

Do you want different RTs running behind SSL and non-SSL, or the same RT?

Same RT – sorry about not being clear on that. The situation I’m trying
to discover is if there is a useful performance gain to RT2 by having
non-ssl sessions for a range of systems within a “trusted” network (more
physically trusted).

We’re not ready to migrate to RT3, but it looks like many of the blocking
factors for us are nearly removed on that, but we expect to use RT2 for a
few more months at least; so having a bit more speed increase would help.

(The system is a 4Gig of ram, quad xeon, with 100k tickets, MySQL/Innodb,
and all the optimisation that could be figured out on exchanges on the
rt-users/rt-devel lists – people still complain if a query/search takes
longer than two or three seconds to display the result on their
workstation).

Scott

rt-users mailing list
rt-users@lists.fsck.com
http://lists.fsck.com/mailman/listinfo/rt-users

Have you read the FAQ? The RT FAQ Manager lives at http://fsck.com/rtfm

Thus spake Scott A. McIntyre (scott@xs4all.net) [14/08/03 04:21]:

On an RT2 box (remember that?) is there a way to have both a SSL and
non-ssl version of RT running simultaneously? The etc/config.pm includes
the $WebBaseURL which I suspect will be overriding one or the other.

Anyone hacked this already?

I played with this a bit, and the only thing it seemed to affect is the URLs
sent out via Scrips, and the location of the image. It didn’t seem to hurt
any by leaving the $WebBaseURL as http://, and just using https:// manually.

This one time, at band camp, Scott A. McIntyre wrote:>–On Thursday, August 14, 2003 22:30 +1000 Jamie Wilkinson jaq@spacepants.org wrote:

This one time, at band camp, Scott A. McIntyre wrote:

On an RT2 box (remember that?) is there a way to have both a SSL and
non-ssl version of RT running simultaneously? The etc/config.pm
includes the $WebBaseURL which I suspect will be overriding one or the
other.

Do you want different RTs running behind SSL and non-SSL, or the same RT?

Same RT – sorry about not being clear on that. The situation I’m trying
to discover is if there is a useful performance gain to RT2 by having
non-ssl sessions for a range of systems within a “trusted” network (more
physically trusted).

Well, I run RT behind SSL and have my non-SSL server on the same ip do a
redirect to the SSL version.

Unfortunately it’s not going to be easy to do some performance testing
given that RT only has one WebBaseURL that it prefers. I’d suggest running
an SSL version for a while and then non-SSL and comparing the results.

I haven’t noticed any significant speed difference between the two though.
The majority of our https traffic to RT is on an internal network as well,
but I wouldn’t disable it for performance reasons just because the internal
network is more “trusted” than the outside world. Multiple levels of
security are always a good thing.

jaq@spacepants.org http://spacepants.org/jaq.gpg