Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
 format=flowed
Content-Transfer-Encoding: 8bit
Date: Wed, 20 May 2015 09:56:55 +0200
From: =?UTF-8?Q?Bj=C3=B8rn_T_Johansen?= <btj@havleik.no>
To: Tomcat Users List <users@tomcat.apache.org>
Subject: Re: Nginx as a proxy...
Organization: Havleik Constulting
In-Reply-To: <555C3BE5.3060607@apache.org>
References: <20150519232529.61755be9@pennywise2.havleik.net>
 <555C2942.4010604@apache.org> <95cd4b7fb6ac65c1ad57d73a7b7acc30@havleik.no>
 <555C3BE5.3060607@apache.org>
Message-ID: <83c40d491af8ca2ae3ad5c970ce98968@havleik.no>
User-Agent: Roundcube Webmail/1.0.5

On 20.05.2015 09:46, Mark Thomas wrote:
> On 20/05/2015 07:56, Bjørn T Johansen wrote:
>> On 20.05.2015 08:27, Mark Thomas wrote:
>>> On 19/05/2015 22:25, Bjørn T Johansen wrote:
>>>> I have a small problem using nginx as a reverse proxy in front of
>>>> Tomcat 8.. The problem is that sometimes the context url is set to
>>>> the local ip
>>>> address of the tomcat server instead of the hostname used to access
>>>> the nginx server.
>>>> And I know this can be solved by using proxyname and proxypost but 
>>>> as
>>>> far as I can see, this can only be configured for the connector 
>>>> port,
>>>> which
>>>> make the setting global? Add I run 5 other web applications in the
>>>> same Tomcat instance so changing this globally is not an option...
>>>> 
>>>> Anyway to solve this?
>>> 
>>> option 1. Configure nginx to set the host header as you wish
>>> 
>>> option 2. Remote IP Host/Valve (still requires nginx config)
>>> 
>>> Mark
>>> 
>> 
>> Thx, was missing the HOST header... And now the url is almost 
>> correct...
>> The remaining problem, is that the url looses the scheme used, so it
>> gets redirected to http address instead of https; is that configured 
>> in
>> the Tomcat config somewhere or?
> 
> Set the scheme on the connector.
> 
> If nginx is receiving both http and https traffic then the simplest way
> is to have two connectors in Tomcat, one with scheme="http" and one 
> with
> scheme="https" (and secure="true").
> 
> Note that scheme, secure and sslEnabled may all be set independently to
> handle the various permutations of reverse proxy config.
> 
> Mark
> 
> 

Yes, just thought of having a second connector for ssl, thx for 
confirming it... :)

BTJ

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org