Proxing to tomcat with httpd
summary
Apache httpd is configured as a reverse proxy to Tomcat using AJP, mod_proxy_ajp or HTTP backends (HTTP/1.1, H2C and HTTPS) with mod_balancer or mod_jk. Performance tests show mod_jk and mod_proxy AJP perform similarly; recommendation is to prefer HTTPS over AJP because AJP lacks upgrades and has past security issues. Demo uses curl and an SSLValve to export client TLS data as headers so Tomcat reads client certificates successfully through the proxy.
AI-written summary · about
chapters (10)
- 0:00Introduction to proxying
- 1:07What is a proxy and its uses
- 3:58Protocols overview AJP HTTP HTTPS
- 8:20Mod_jk vs mod_proxy comparison
- 15:57Configuring mod_jk and mod_proxy AJP
- 19:50Configuring mod_proxy HTTP
- 21:12HTTP/2 cleartext proxying
- 22:57TLS configuration with Tomcat
- 28:18Demo TLS certificate forwarding
- 34:06Q&A and resources
related talks
01h 24mFastest Servlets in the West?
53mThe Mod_Proxy Cookbook
48mBetter performances on the server side with HTTP/2
53mComet, Ajax, web browsers limitations and web apps performance factors
37mRemote Desktops: Ensuring Performance and Security with Apache Guacamole
53mHTTP/2 Two Years Later
27mOpenSSL and QUIC using FFM
31mHTTP/2 in Practice