發表者討論內容

冷日
(冷日) 發表時間：2016/9/16 8:46

Webmaster

註冊日: 2008/2/19
來自:
發表數: 15771

[轉貼]Tomcat listen only on localhost

Tomcat listen only on localhost

We want to run servlets on Tomcat and serve them via Apache using the proxy_ajp connector.

On the standard installation, Tomcat was listening on port 8080, which was not blocked by a firewall. This means a servlet was not only accessible via Apache on port 80:

http://www.example.com/servlet

But also via Tomcat on port 8080:

http://www.example.com:8080/servlet

To ensure the only way in to our servlets is via apache, you can try the following fix:
In the Tomcat server.xml add the attribute ‘address=”127.0.0.1″‘ to the HTTP and AJP connectors. This makes Tomcat listen only on the localhost.

Examples:

<Connector address="127.0.0.1" port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" />
<Connector address="127.0.0.1" port="8009" protocol="AJP/1.3" redirectPort="8443" />

Then in your apache config, ensure that your proxy_ajp is connecting on localhost.

ProxyPass /my_servlet ajp://localhost:8009/my_servlet
ProxyPassReverse /my_servlet ajp://localhost:8009/my_servlet

冷日：
先上這個範例，他是教你如何讓 Tomcat 只 Listen localhost！
因為他要讓前端交給 Apache 來處理，畢竟大多數時候我們還是比較信任 Apache 及 80 Port！
原文出處： Tomcat listen only on localhost » Computational Geoscience Rant

回覆

平面展開

前一個主題 | 下一個主題 | |

| |

討論串

» [轉貼]Tomcat listen only on localhost (冷日
(冷日), 2016/9/16 8:46)
[轉貼]Can't access Tomcat using IP address (冷日
(冷日), 2016/9/16 8:50)
[轉貼]Can only connect to Apache Tomcat with localhost (冷日
(冷日), 2016/9/16 8:53)

發表新主題

爪哇咖啡屋 : [轉貼]Tomcat listen only on localhost

討論串