IP assignment for virtual webhosting

At Thu, 11 May 2000, owner-lir-wg at ripe.net wrote:


>for a), you pointed out the important thing: It's inaccurate. If it would
>only be CPU-Power, you could use an own machine fopr that.
>forb), the main problem is to write such a software. Who of us has the time
>to do so? It would be very cool to have such a piece of software, but who
>can develop it? Or is there something that is capable to do so?
>Second problem, as you noticed, there could be a need to change your
>betwork layout. Our backbone is switched, and not every switch (in the
>Server-Racks we don't use the expensive Ciscos, there are simple Switches
>without Monitor-Port). So you would have to place the sniffer a) on the
>firewalls or the routers -> not a good idea - think of CPU, Diskspace, ..
>or b) but not always possible put in in the transfernet between firewalls
>and borderrouters. b) could be a olution for us if there were some kind of
>software usable for that.

We have a machine over here that shares a HUB with the border router. That
machine (which has no IP address ofcourse ;-)) thus sees all traffic and
is our IDS. It could do accounting too if neccessary, but then there
indeed has to be software which reads out HTTP 1.1 traffic.

Mark Lastdrager
Pine Internet

-- 
email: mark at lastdrager.nl :: ML1400-RIPE :: tel. +31-70-3111010
http://www.pine.nl :: RIPE RegID nl.pine :: fax. +31-70-3111011
PGP key ID 92BB81D1 :: Dutch security news @ http://security.nl
Today's excuse: Standing room only on the bus.