tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ben Stringer" <...@burbong.com>
Subject Re: Apache Reverse Proxy required or not?
Date Thu, 14 Oct 2010 22:03:18 GMT
> Hi All,
>
>
>
> Quick question on what people's views are with regard to using Tomcat to
> host external/internet facing sites. A quick Google search recommends
> that these should be 'fronted' by Apache running reverse proxy. Is
> Tomcat classed as insecure and as such requires this proxy in front or
> is this due to the fact that Tomcat cannot reverse proxy on its own.
>

Certainly tomcat is up to the task of running external sites without a
reverse proxy. Some reasons you may choose to put a httpd reverse proxy in
front of tomcat:

- Allows displaying a "this site is down for maintenance" message when you
have taken your tomcat down for maintenance.
- Many third party security products supply agents as an apache httpd plugin.
- httpd can be used as a load balancer to a farm of tomcat processes.
- you may prefer to have the web access logging granularity that httpd
provides.

It really depends on your situation.

Cheers, Ben


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message