Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
MIME-Version: 1.0
In-Reply-To: <CAGPC6zxcVjBBsY892fKZgiB7wB10ortwhYU1=fLe9jNUSEFGEA@mail.gmail.com>
References: <CAAOQ9-v8AqMi3aVX84sK=n-zpvvAY=mLLoM8KFnm=12Ei1SeyA@mail.gmail.com>
 <CAGPC6zxC-6k0HDKTjaTk9GvPBYhYVy3+mYA2r_RyKiLg7Mkhng@mail.gmail.com> <CAGPC6zxcVjBBsY892fKZgiB7wB10ortwhYU1=fLe9jNUSEFGEA@mail.gmail.com>
From: "Antonio S. Cofino" <cofinoa@gmail.com>
Date: Tue, 21 Feb 2017 22:05:59 +0000
Message-ID: <CAGPC6zwMQH_ABToJ4PA0-GgyMzX8ksMk0QGsJXV7gLb2uAa_mA@mail.gmail.com>
Subject: Re: Strange URL rewrite when reverse proxy with Apache HTTP Server
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: multipart/alternative; boundary=001a113f976ad31dcf05491195da
archived-at: Tue, 21 Feb 2017 22:06:11 -0000

--001a113f976ad31dcf05491195da
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Aaron, on tomcat instances change the redirectPort attributte on the http
conect=C3=B3 to the loabbalancer's port 443

My guess is that your webapp has restriction rule requesting SSL con
fidntial channel. Therefore the non-confidential to the 18080 port from the
balancer are redirected to the 23270 port, but it should be 443.

Antonio


El 21/2/2017 19:46, "Aaron Gray" <aaronmgray@gmail.com> escribi=C3=B3:

I have an application server from a vendor that comes bundled with an
additional Apache Tomcat server.  The webapp SelfService.war is vendor
supplied too.

Here's my problem (IP's replaced to protect the innocent):

networks:
DMZ=3D172.x.x.x
INTERNAL=3D10.x.x.x

server1 https listen =3D 172.1.1.1:23270
server2 https listen =3D 172.1.1.2:23270
F5 load balancer hostname =3D loadbalancer.domain.com:443
backend tomcat server =3D 10.1.1.1:18080

mod_proxy configuration:
ProxyPass /SelfService http://10.1.1.1:18080/SelfService
ProxyPassReverse /SelfService http://10.1.1.1:18080/SelfService

When I access these DMZ webservers which mod_proxy back to Apache Tomcat as=
:
https://172.1.1.1:23270/SelfService
and
https://172.1.1.2:23270/SelfService <https://172.1.1.1:23270/SelfService>
They load properly. Perfectly, every time!

When I access these DMZ webservers via the F5 load balancer (to which I
dont have access to, but the network folks configure for me), it hangs.
Eventually returns:
https://loadbalancer.domain.com:23270/SelfService
cant load.

No idea why the URL is being re-written with the ":23270".
I added static content to the server.xml on 10.1.1.1 (Tomcat) to test:
<Context docBase=3D"/path/to/tomcat/static" path=3D"/static" />
Then put a simple index.html in there.  Accessing via the Apache Web
Servers works fine, but if you hit it with the Load Balancer it once again
adds the https://loadbalancer.domain.com:23270/static

Do you have any thoughts?  Thanks so much, I have been working with this
for weeks now with no success

--001a113f976ad31dcf05491195da--