incubator-wave-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Greg Tangey <rux...@rhythmandpoetry.net>
Subject RE: Setup WIAB behind an apache server
Date Wed, 16 May 2012 11:43:56 GMT
Running with root privs to acquire port 80 is a security hole waiting to be hurt.

You should run it as normal and use iptables or something else to redirect port 80 to 9898.

Mine runs as such, on a server that has 2 IP adresses on one interface.  The main IP is used
for everything but Wave and wave runs on the 2nd IP address.

iptables -A PREROUTING -t nat -p tcp -d <YOUR_IP> --dport 80 -j DNAT --to <YOUR_IP>:9898
service iptables save
service iptables restart

and my config looks like this:
# Domain name of the wave server
# Default value: local.net
wave_server_domain = wave.example.com

# A comma separated list of address on which to listen for connections.
# Each address is a comma separated host:port pair.
# Default value: localhost:9898
http_frontend_public_address = localhost:9898, wave.example.com:9898

# Default value: values passed to http_frontend_public_address.
http_frontend_addresses = wave.example.com:9898

-----Original Message-----
From: 李向彬 [mailto:dannyalanshore@gmail.com] 
Sent: Wednesday, 16 May 2012 7:27 PM
To: wave-dev@incubator.apache.org
Subject: Re: Setup WIAB behind an apache server

how can i do that since apache already taken the port:80?

On Wed, May 16, 2012 at 5:42 PM, Yuri Z <vega113@gmail.com> wrote:

> You can set the port to 80 in the server.config. But you would need to 
> start the server with sudo on Linux machines.
>
> On Wed, May 16, 2012 at 6:00 AM, 李向彬 <dannyalanshore@gmail.com> wrote:
>
> > have you had any success  with this situation: running apache with 
> > wave
> in
> > box together with out having to specify the port number.
> >
> > On Wed, Mar 21, 2012 at 3:19 AM, Vicente J. Ruiz Jurado < 
> > vjrj@ourproject.org
> > > wrote:
> >
> > > El 20/03/12 19:25, Yuri Z escribió:
> > > > This is really cool. Maybe we need to add some documentation on 
> > > > how to implement this solution. If you go for it - would be 
> > > > great to hear back if it worked and how :)
> > >
> > > In fact I found it just talking with a friend about the "status of art"
> > > of websockets and other software (nginx, ff, etc), but I don't 
> > > need to use it now. Maybe in some weeks I can test it, but not 
> > > now, and of course I'll share my experience.
> > >
> > > Bests,
> > >
> > >
> > >
> > >
> >
> >
> > --
> > *danny*
> > *Mobile:18912945948*
> > *qq:466765117*
> >
>



--
*danny*
*Mobile:18912945948*
*qq:466765117*
Mime
View raw message