http://tomcat.apache.org/faq/connectors.html#integrate

It depends.

If you (or your admins) can't do a good job of securing apache. Then one could argue - that you be LESS secure if your ran apache in front of Tomcat.

Personally - the only reason I would run apache in front of Tomcat because of mod_rewrite.

Since adding (or removing apache) is a transparent operation to the user (browser) - I would not put apache in front of tomcat and only do so - when it makes sense. Why admin 2 packages when you don't need to?


-Tim

Georg Zeiser wrote:
Hello guys,
i hope you can help me...

We want to run a java enterprise application on Tomcat. But we don't know what is better, Tomcat (6.0.14) as standalone or Tomcat behind an Apache (2.0.59 or 2.2.x) with mod_jk. If a customer has Apache already installed, we will use the configuration with mod_jk. But what to do when there is no web-server? Are there any reasons NOT to run Tomcat as a standalone-server in a produktive environment? The most important point is security: would it be "easier to hack" an standalone Tomcat than Tomcat+Apache?
Performance shouldn't be a problem because there is only 1 application.


---------------------------------------------------------------------
To start a new topic, e-mail: users@tomcat.apache.org
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to