Deployment Scenarios
Popular deployment scenarios are discussed along with configuration and discussion for implementation.
Tomcat Alone
TBD - Marvin S. Addison
Tomcat via Apache Reverse Proxy
An Apache reverse proxy architecture provides for a number of features that may be desirable for some deployment environments:
Load balancing capabilities via mod_proxy_balancer
Improved SSL/crypto handling via OpenSSL or SSL offloading via custom hardware
The Apache proxy documentation may be a helpful reference for the discussion in the following sections.
mod_proxy_ajp
Quick demo of using ProxyPass syntax in an Apache VirtualHost.
<VirtualHost xxx.xxx.xxx.xxx:443>
# SERVER
ServerAdmin root@localhost
ServerName https://server.host.name
UseCanonicalName On
TraceEnable Off
# SSL
SSLEngine On
SSLProtocol all -SSLv2
SSLCertificateFile /path/to/server.crt
SSLCertificateKeyFile /path/to/server.key
# LOGS rotate logs daily
ErrorLog "|/usr/sbin/rotatelogs /var/log/httpd/servername-error_%Y%m%d.log 86400 -300"
CustomLog "|/usr/sbin/rotatelogs /var/log/httpd/servername-access_%Y%m%d.log 86400 -300" common
# AJP
ProxyPass / ajp://127.0.0.1:8009/
ProxyPassReverse / ajp://127.0.0.1:8009/
</VirtualHost>
mod_proxy_http
TBD