Re: Multiple http servers for zendphp7

[Pete Helgren <pete@xxxxxxxxxx>]

So, just off the top of my head:

Create the Internal IP addresses so that you can start individual 
instances of HTTP on those IP's.  This isn't a big deal, it just depends 
upon who does the work.  In my case I have a development machine that 
can pretty much run amok on (and I do).  Create the IP addresses and 
start them.

PHP is a system wide utility that runs PHP scripts.  It is like CL: You 
can have multiple instances of CL programs running but you only need one 
CL "executor".  It'll handle CL programs in any library on the system.  
You won't need a separate LPAR for each CL program.  You won't need a 
separate LPAR to run 4 websites executing different PHP scripts. You 
*could* build lpars if there will be more than just separate Apache 
instances running but if all you need are 4 separate, secure websites on 
your i, you won't need LPAR's (unless I am missing something..)

What you will need are at least 4 Apache instances running on your 4 new 
internal IP's.  Each Apache instance will have it's own folder in the 
IFS and each Apache configuration file will have directives on where to 
find the PHP programs to run the scripts in each Apache instance.  
Again, so far, plain vanilla Apache and PHP.

These guys are drop dead easy to create.  I don't have access to my 
system at the moment but as long as you have PHP installed and the 
correct directives in your Apache config file, you could have 4 websites 
up and running PHP in less than an hour, easy.  The caveat is what PHP 
scripts you'll be running (e.g. Wordpress, etc) and then how you'll 
accept outside traffic into your i (unless it is an Intranet which would 
make it easier).

I am fighting a bunch of security fires at work so I don't know when I 
can whip a few examples together. But I'll try to do it over the 
weekend, perhaps...

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
Twitter - Sys_i_Geek  IBM_i_Geek

On 1/25/2018 5:06 PM, Don Brown wrote:
> Ok this is well above my skill level!
>
> I had to look SNI up to find it is Server Name Identification
>
> I have a single PHP application running on IBMi at 7.2 and 7.3 that is
> used by multiple entities and each entity requires a https connection with
> appropriate ssl certificate.
>
> I have a deadline of 1st Feb to get this operational.
>
> There is such a certificate as a SAN but getting specific information on
> this is seeming difficult.  I tried calling the US and UK offices of
> GeoTrust and after 10 minutes + on hold to each I left a message and no
> replies as yet.
>
> And I can not find anything that specifically indicates this is supported
> on IBMi.