By jakinn on

This is probably a really dumb question but I am trying to setup a 2 tier environment. I would like to have Drupal running on a server other than the one Apache is running on, is this possible? So I would have Apache running on a server in a DMZ and then Drupal running within an internal network. Does that make sense? If so, is it possible or does Drupal have to run on the same box as Apache?

Thanks in advance.

⋅ Categories: Drupal 5.x

Comments

pcs305’s picture

pcs305 commented

Drupal runs on Apache and the 2 cannot be separated.
What you can do is have the database remotely on a separate server from Apache and on the internal network.

jakinn’s picture

jakinn commented

Thanks! That is what I was wondering. I currently have it configured that way but I am also using CiviCRM module and was trying to create a 3 tier environment. Apache | Drupal/CiviCRM | MySQL but it appears I can only get to a 2 tier environment Apache Drupal/CiviCRM | MySQL.

Thanks again.

styro’s picture

styro commented

What would this architecture give you? Besides the latency and security headaches of course.

--
Anton
New to Drupal? | Troubleshooting FAQ
Example knowledge base built with Drupal

jakinn’s picture

jakinn commented

Currently, all of our applications that face the outside world are 3 tiered, recommended by our security team. I was just trying to figure out if this was possible but since it appears it isn't a good thing to attempt I am now looking at AppArmor to see if this will provide the security that will suffice our security group.

jakinn’s picture

jakinn commented

Just another question. Could I place a proxy server in a DMZ that would communicate with Drupal and work/function as if the Drupal/Apache server was sitting in the DMZ? Has anyone configured such an environment without experiencing any issues?

styro’s picture

styro commented

but you won't be increasing your security any - if anything you've decreased it. Most proxies aren't going to offer much in the way of protection to your web app and you've put the potentially vulnerable server behind your DMZ rather than in it where it belongs.

Add to that you've got another machine (the proxy) to manage, secure and keep up to date as well as another variable to troubleshoot if anything goes funky.

--
Anton
New to Drupal? | Troubleshooting FAQ
Example knowledge base built with Drupal