6 ms·
Is it fairly common to forward port 80 to some higher level port, so the server can run as a non-root user? I do it out of necessity, but have yet to play with
by chopsueyar 15y ago
Is it fairly common to forward port 80 to some higher level port, so the server can run as a non-root user?
I do it out of necessity, but have yet to play with the statistics portion of iptables.
Cool little article.
- jvoorhis 15y agoI've used this trick to forward to a Twisted Conch daemon running as a non-root user. However, I would never consider this approach for load balancing.
- sparrish 15y agoWhy would you never consider it for load balancing?
- adamtulinius 15y agoBecause first of all it's just a variation of round-robin, which doesn't take into account that different requests will take varying amounts of time. Secondly, you can't (in an easy way) remove or add to the pool of backends. I'm confident others will come up with more not-so-compelling reasons for using iptables for load balancing.
- adamtulinius 15y agoIt's probably more common to start a service as root, bind to a port, and drop privileges.