2 Replies Latest reply: Mar 6, 2012 2:42 AM by viveks RSS

    APEX Setup for Production

    viveks
      Currently we have installed apex 3.2 in our production system. Both the Oracle HTTP Server (Apache) and the Db reside on same server as such they are on the external DMZ. Security issue has been raised for this as the Database is exposed to external world. Requirement is that Apache should be on external DMZ and the Db should be in the internal DMZ. Is it possible to seprate both layers on different servers. Can I have only the OHS on one server and Db on another. Would like to have a how-to document on this.
      We are also thinking of moving to Oracle 11g. In 11g there is not need for OHS to be installed separately. But as above, we would like to separate Apache and Db in separate DMZ.
      Can somebody provide help for above....
        • 1. Re: APEX Setup for Production
          fac586
          viveks wrote:
          Currently we have installed apex 3.2 in our production system. Both the Oracle HTTP Server (Apache) and the Db reside on same server as such they are on the external DMZ. Security issue has been raised for this as the Database is exposed to external world. Requirement is that Apache should be on external DMZ and the Db should be in the internal DMZ. Is it possible to seprate both layers on different servers.
          Yes.
          Can I have only the OHS on one server and Db on another.
          Yes, but it incurs additional licensing costs. OHS is free to deploy on the same server as the DB, but not if they are separated.
          We are also thinking of moving to Oracle 11g. In 11g there is not need for OHS to be installed separately.
          If by this you mean you are thinking of using the Embedded PL/SQL Gateway then reconsider: OHS provides better performance and infinitely better features and flexibility.
          But as above, we would like to separate Apache and Db in separate DMZ.
          Can somebody provide help for above....
          A frequent solution is to use a standard Apache web server in the external DMZ as a reverse proxy to OHS in the internal DMZ, with OHS and the DB on the same server for licensing reasons.

          You'll find more information on this configuration in the forum.
          • 2. Re: APEX Setup for Production
            viveks
            Thanks,

            We completed successful movement of Db to internal DB DMZ. On this server we have Db and OHS installed. And in external DMZ we have standard Apache with reverse proxy configured to OHS Server. Set up working without any issues for last 1 month.