From: Michael K. Edwards <medwards.linux@gmail.com>
Date: Sat, 09 Dec 2006 04:36:18 GMT
Subject: Re: kernel.org mirroring (Re: [GIT PULL] MMC update)
Message-ID: <f2b55d220612082036u1853eb6ei40ad45c2150e1999@mail.gmail.com>
In-Reply-To: <Pine.LNX.4.64.0612081648160.3516@woody.osdl.org>

On 12/8/06, Linus Torvalds <torvalds@osdl.org> wrote:
> That said, I'm not personally convinced that there is much point to using
> netfilter for transparent proxying. Why not just use separate ports for
> squid and for apache?

Just a question of whether you want to be able to yank the squid box
out if it goes pear-shaped, without touching configs on the apache
box.  Some people like to stick the proxy in as a no-op at first, then
tell netfilter to divert 1% of sessions to squid and see how it holds
up, retune, ease it in, ease it out, figure out how much operational
flexibility you will have as demand continues to scale.  If the squid
and apache are on the same box it's probably less of an issue.

Cheers,