Re: Tomcat and port 80

• Subject: Re: Tomcat and port 80
• From: Stephen Coy <email@hidden>
• Date: Sat, 28 Feb 2004 09:50:48 +1100

Greg, Barry, thanks for the feedback.

At 3:16 PM -0700 2/25/04, Greg Guerin wrote:

Scott Kelley <email@hidden> wrote:

Does anybody know how to use "ipfw" (ip firewall) to forward port 80 to a
non-privileged port?

Have you read 'man ipfw'?

Yes, I started by reading the man page, plus doing a Google search for ipfw-related stuff on both MacOS and *BSD, and followed up by building a test server I can use to experiment with ipfw without worrying about messing up my development box.

However, man pages tend not to say things like "but whatever you do, do NOT try to use this to run Tomcat on MacOS X!" because man pages tend to be a little skimpy when it comes to these kinds of details. For instance, maybe there's a glaring security hole that hasn't occurred to me yet? Or maybe it Just Doesn't Work for reasons that aren't immediately obvious.

Which is why I thought I would ask when the topic came up here.

At 11:04 AM -0500 2/26/04, Barry Hawkins wrote:

Just wanted to point out that the use of Tomcat's connectors (mod_jk or similar) would probably be recommended, since the web server (Apache, IIS, etc.) is better at handling non-JSP/Servlet processing, so while moving Tomcat to port 80 would remove the garish :8080 type of URL modifier, it might not be the best choice, particularly on a production system.

Plain old Tomcat is more than fast enough for us, given our user base and the available hardware. Our biggest obstacle right now is complicated configurations and not enough hours in the day for our sysadmins, so any configuration simplification we can do is typically a very good thing. Also, we're working with an ever-more-challenging authentication environment, and only having to deal with this problem on one kind of server instead of two is also a very good thing. These are some of the reasons we're moving away from mod_jk and friends, particularly for our intranet configuration, despite having used it successfully in production for many years.

Sigh... I'll fiddle with ipfw and Tomcat this weekend, and if I can get it to work I'll post back to the list.

• Prev by Date: Re: JTable/ListSelectionModel right-click issues
• Next by Date: Re: Using a Locale when your not local ?
• Previous by thread: Re: Tomcat and port 80
• Next by thread: Localizing the App menu?
• Index(es):
  • Date
  • Thread