Re: Changing how LedgerSMB is run and it's installation is secured

[David G <..hidden..>]

Hi Michael,

At the moment I don't believe we support having multiple LedgerSMB
servers accessing the same company database, which is roughly what you
are referring to.
Having said that, I also don't think it would take too much in the way
of changes to make that possible (most state and consistency is in the
database already)

But Be Warned, it may not be possible before the last of the legacy code
has been rewritten.
Also there would need to be a fair investment in testing before you
would say it's production ready.

Chris and Erik may well contradict me on this, as they should if I'm
incorrect.

It's certainly a direction I'd like to be able to move towards,
especially if a robust and reliable bidirectional postgres replication
solution could be used (which it can't at the moment. a) it doesn't
exist. b) there are challenges that would need solving within our code
to do with data integrity eg: assignment of unique consecutive invoice
numbers across multiple DB backends)

Regardless of that use case, it solves some current issues running under
apache directly, and provides performance gains due to the way Starman
handles perl processes, and nginx as a reverse proxy caches static content

Oh, just a note, We are not proposing to prevent LedgerSMB from being
directly served by Apache etc. just making the primary method (ie: the
way it gets installed) be to run via Starman and a reverse proxy

Regards
David G

On 26/03/16 02:56, Michael Richardson wrote:
>     > 1 Only ever run LedgerSMB using Starman (High-performance
>     > preforking PSGI/Plack web server)
>     > 2 Only ever bind Starman to localhost
>
> I'll all for this.
>
> (In bigger installations, one binds starman to a backend network, and uses
> nginx or apache or maybe varnish to spread load.  Is there any local state in
> LedgerSMB that would prevent this...?)
>
> --
> ]               Never tell me the odds!                 | ipv6 mesh networks [
> ]   Michael Richardson, Sandelman Software Works        | network architect  [
> ]     ..hidden..  http://www.sandelman.ca/        |   ruby on rails    [
>
>
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785351&iu=/4140
> _______________________________________________
> Ledger-smb-devel mailing list
> ..hidden..
> https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel
>



------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785351&iu=/4140
_______________________________________________
Ledger-smb-devel mailing list
..hidden..
https://lists.sourceforge.net/lists/listinfo/ledger-smb-devel