Re: Security and Performance Configuration

2008-02-26 Thread Peter Stavrinides
Hmm... AJP Connector is definitely an option. Mark H. Wood wrote: Well, IF you are sure you want to use Apache HTTPD to frontend Tomcat, there's no reason for Tomcat to run an HTTP connector at all. Just use the AJP connector, and only allow it to listen to your frontend service(s), or

Security and Performance Configuration

2008-02-25 Thread Pedro Stavrinides
Hi all, I know this topic, or at least bits and pieces of it, has been covered in various posts, but just for clarification in my mind I would like the opinions of experienced Tomcat and Unix/Linux experts about optimizing performance and security configuration for Tomcat. As a starting point

Re: Security and Performance Configuration

2008-02-25 Thread Mark H. Wood
Well, IF you are sure you want to use Apache HTTPD to frontend Tomcat, there's no reason for Tomcat to run an HTTP connector at all. Just use the AJP connector, and only allow it to listen to your frontend service(s), or firewall it away from the Big Bad Internet. (Or both.) -- Mark H. Wood,