users@glassfish.java.net

App Deployment Architecture

From: <glassfish_at_javadesktop.org>
Date: Sun, 30 Mar 2008 15:24:50 PST

Hi

we are currently in the planning phase to design an enterprise java application with the following requirements:

1. High number of users, potentially hundreds of concurrent users
2. Quite processing intensive in terms of logic
3. Security is key

What is the best option:

(1) Use a two-tier approach i.e. separate web/jsp/servlet container and connect to a dedicated glassfish ejb container on another server (potentially clustering the glassfish server but still behind the first tier)

OR

(2) Go for a single server with client tier and server tier deployed on the same server machine (potentially using clustering as well here but having everthing deployed across the same cluster)


For option 2, what are the security issues? assuming that for option 2 this means that servers (including ejb layer) has to be deployed in the DMZ rather than behind the DMZ. With the first option one can put the client tier in the DMZ and second tier behind the DMZ.

Any comments/suggestions please?

Thanks
Vince
[Message sent by forum member 'vvella' (vvella)]

http://forums.java.net/jive/thread.jspa?messageID=266703