Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[OT] Running Tomcat on port 80

I haven't tried ipfw but from the man page it looks quite an interesting
possibility.

Running TC on port 80 is one of the topics most frequently discussed. Many
people don't want or need Apache which is the de facto means of running on
port 80. Installing, configuring and maintaining Apache then doing the same
for the connector (i.e. mod_jk) is not trivial and for the most part
unnecessary overhead for sites whose material is mostly served from TC
anyway.

I don't pretend to know all of the issues of why Apache can spawn threads
under a different user and TC can't but IIRC it has as much to do with the
JVM and how a Servlet container classloads as it does with access to native
threads and the underlying OS.

In anycase I would recommend that any of you deploying production TC in a
*nix environment that you buy, read and understand "Tomcat: The Definitive
Guide" from O'Reilly. An indispensible book for both *nix installations and
Windows.

Chapter 6 is devoted to TC security and speaks in depth about TCs own
SecurityManager as well as how to chroot TC. For most sites chroot is
suffcient even if TC is running as root.

If you want to simulate the Apache style system you will need to run TC
5.x.x and use Jakarta Commons Daemon jsvc. TC 5 ships with jsvc and with
instructions on how to build and install.

Steven
_______________________________________________
java-dev mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/java-dev
Do not post admin requests to the list. They will be ignored.



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.