[Zope] Can Zope 2.4.0 be run "naked" (without Apache/Squid/IIS)?
Tue, 9 Oct 2001 09:19:10 -0700
Zope runs just fine without anything in front of it and despite the issues
you mentioned have never had the slightest problem.
----- Original Message -----
Sent: Tuesday, October 09, 2001 9:17 AM
Subject: [Zope] Can Zope 2.4.0 be run "naked" (without Apache/Squid/IIS)?
> On the "Zope Changes" page for Zope 2.4.0
> (http://www.zope.org/Products/Zope/2.4.0/CHANGES.txt), one of the changes
> mentioned is "Fixed handling of invalid HTTP requests."
> One of the main arguments (as I understood them) for running Zope behind
> Apache/Squid/IIS was that Zope was susceptible to denial of service
> due to the way it handled HTTP requests. The Apache/Squid/IIS front-end
> used to sanitize the HTTP request.
> Does the change made with the release of 2.4.0 fix this problem? If so,
> other roadblocks are there to running Zope "naked"?
> Aaron Gillette
> Zope maillist - Zope@zope.org
> ** No cross posts or HTML encoding! **
> (Related lists -
> http://lists.zope.org/mailman/listinfo/zope-dev )