On Fri, 10 Feb 1995, David Miller wrote:
>
> Why wouldn't you use simple software created for the task of access
> control to secure access control, like tcp_wrappers or netacl?
>
It is possible but not recommended to run the CERN httpd from inetd
because of the overhead to spawn it so often; it's more efficient to have
it running in daemon mode and have it fork itself for new connections as
it's already processed its config file, and the image is already in core.
This is even more important now, IMHO, with the proliferation of Netscape,
which asks for _lots_ of URLs at once.
Http-gw & plug-gw are much more lightweight, so it's not _as_much_ a
concern running them from inetd. Don't have any empirical measurements,
though.
-- KH
Follow-Ups:
References:
|
|
