From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: AS31976 209.132.176.0/21 X-Spam-Status: No, score=-3.4 required=3.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED, DKIM_SIGNED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MSGID_FROM_MTA_HEADER,RP_MATCHES_RCVD shortcircuit=no autolearn=ham autolearn_force=no version=3.4.0 From: "Michael K. Edwards" Subject: Re: kernel.org mirroring (Re: [GIT PULL] MMC update) Date: Fri, 8 Dec 2006 20:36:18 -0800 Message-ID: References: <20061207193012.GA84678@dspnet.fr.eu.org> <4578722E.9030402@zytor.com> <4579611F.5010303@dawes.za.net> <45798FE2.9040502@zytor.com> <457998C8.3050601@garzik.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit NNTP-Posting-Date: Sat, 9 Dec 2006 04:36:27 +0000 (UTC) Cc: "Jeff Garzik" , "H. Peter Anvin" , "Rogan Dawes" , "Kernel Org Admin" , "Git Mailing List" , "Jakub Narebski" Return-path: Envelope-to: gcvg-git@gmane.org DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=TUvpUHK4/6AgiCQTkDv0/mSZ9Nrfl02ZIcN9c25EuJQm3JtVaZWBgsK7ca74j2BQ4ArHc+NedDmeildXB4FdrP4/+jQK9qaqnU0LIewjb6j6LP2lQV9AX/KKZEXCmrnZtCM/ARy4BSRhUH1ya9AmhIIVV7GJh9ZlUKqG7B82a/U= In-Reply-To: Content-Disposition: inline Precedence: bulk X-Mailing-List: git@vger.kernel.org Archived-At: Received: from vger.kernel.org ([209.132.176.167]) by dough.gmane.org with esmtp (Exim 4.50) id 1Gstwl-0005OF-Ej for gcvg-git@gmane.org; Sat, 09 Dec 2006 05:36:23 +0100 Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758751AbWLIEgU (ORCPT ); Fri, 8 Dec 2006 23:36:20 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1758771AbWLIEgU (ORCPT ); Fri, 8 Dec 2006 23:36:20 -0500 Received: from wx-out-0506.google.com ([66.249.82.235]:14077 "EHLO wx-out-0506.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1758751AbWLIEgT (ORCPT ); Fri, 8 Dec 2006 23:36:19 -0500 Received: by wx-out-0506.google.com with SMTP id h27so995386wxd for ; Fri, 08 Dec 2006 20:36:18 -0800 (PST) Received: by 10.90.29.2 with SMTP id c2mr5053920agc.1165638978546; Fri, 08 Dec 2006 20:36:18 -0800 (PST) Received: by 10.90.94.7 with HTTP; Fri, 8 Dec 2006 20:36:18 -0800 (PST) To: "Linus Torvalds" Sender: git-owner@vger.kernel.org On 12/8/06, Linus Torvalds wrote: > That said, I'm not personally convinced that there is much point to using > netfilter for transparent proxying. Why not just use separate ports for > squid and for apache? Just a question of whether you want to be able to yank the squid box out if it goes pear-shaped, without touching configs on the apache box. Some people like to stick the proxy in as a no-op at first, then tell netfilter to divert 1% of sessions to squid and see how it holds up, retune, ease it in, ease it out, figure out how much operational flexibility you will have as demand continues to scale. If the squid and apache are on the same box it's probably less of an issue. Cheers,