chenk...@126.com wrote: > > > > > > hi：? ??? ? I'm using apache + tomcat to build my website。The tomcat ?provide > http service and apache provide both http/https。I tried two method to > implements： > by mod_proxy:ProxyPass "/" "balancer://mycluster/" stickysession=JSESSIONID > nofailover=On? > ProxyPassReverse "/" "balancer://mycluster/"? > <Proxy balancer://mycluster>? > BalancerMember http://127.0.0.1:8080 route=tomcat1? > BalancerMember http://127.0.0.1:8081 route=tomcat2? > </Proxy> > by mod_jk：I didn't know how to convet https to http like mod_proxy >
Hi. Your email format is a bit bizarre. Try to set up your email program to send emails to the list as "plain text". About your question, here are some semi-graphic explanations about how you can connect Apache httpd to Tomcat. There are many ways. <- xxx -> indicates the protocol used. configuration 1 : using mod_proxy_http and simple HTTP all the way : browser <- HTTP -> Apache httpd + mod_proxy_http <- HTTP -> Tomcat HTTP Connector <-> Tomcat webapp configuration 2 : using mod_proxy_http and HTTPS from browser : browser <- HTTPS -> Apache httpd + mod_proxy_http <- HTTP -> Tomcat HTTP Connector <-> Tomcat webapp configuration 3 : using mod_proxy_http and HTTPS all the way : browser <- HTTPS -> Apache httpd + mod_proxy_http <- HTTPS -> Tomcat HTTPS Connector <-> Tomcat webapp (Note : this is quite inefficient if Apache httpd and Tomcat are on the same host (or connected via a secure link), because all data gets encrypted/decrypted multiple times) configuration 4 : using mod_proxy_ajp : browser <- HTTP -> Apache httpd + mod_proxy_ajp <- AJP -> Tomcat AJP Connector <-> Tomcat webapp configuration 5 : HTTPS variant of using mod_proxy_ajp : browser <- HTTPS -> Apache httpd + mod_proxy_ajp <- AJP -> Tomcat AJP Connector <-> Tomcat webapp configuration 6 : using mod_jk : browser <- HTTP -> Apache httpd + mod_jk <- AJP -> Tomcat AJP Connector <-> Tomcat webapp configuration 7 : HTTPS variant of using mod_jk : browser <- HTTPS -> Apache httpd + mod_jk <- AJP -> Tomcat AJP Connector <-> Tomcat webapp AJP is a protocol that is not the same as HTTP/HTTPS. But it transports the same information as HTTP/HTTPS, and for the Tomcat webapp (and the browser) it is the same. The setups of mod_jk and mod_proxy_ajp are different, but they offer generally comparable options. Choosing one or the other is generally a question of personal preference, or of availability on any given OS platform. There is no "secure variant" of the AJP protocol (iow there is no AJPS e.g.). This does not really matter if the connection between Apache httpd and Tomcat in inside the same host, or (in many cases) if the connection between Apache httpd and Tomcat happens over your local LAN, and you are not concerned by "men-in-the-middle" there. In configurations 2, 5 and 7, only the part browser <--> Apache httpd is under HTTPS. That is generally called "terminating HTTPS at the Apache httpd level". But in all cases, if Tomcat needs to know some details about the browser HTTPS connection, it can get them, because the connector modules can forward that information via HTTP headers (or AJP "attributes"). --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
