Conditionally permitting HTTP-only requests to Tomcat?
Posted
by Mike
on Server Fault
See other posts from Server Fault
or by Mike
Published on 2010-06-14T15:22:01Z
Indexed on
2010/06/14
15:33 UTC
Read the original article
Hit count: 356
I have 2 versions of a system:
- Tomcat webserver
- Nginx reverse-proxy sitting in front of a tomcat webserver.
In version 2, nginx only ever talks to Tomcat over HTTP.
A user could configure the system so that only HTTPS requests are allowed. If the user does this in Version 1 and then the XML configuration files for Tomcat takes care of this. In version 2, nginx takes care of this.
The problem is this: I cannot force a user to update their Tomcat XML config files when they upgrade from version 1 to version 2 (it will be recommended that they do so) because this is done as part of a larger process. This means that if they upgrade and don't update the Tomcat config, an HTTPS request will arrive at nginx, which will proxy it over HTTP to Tomcat which will reject the request because it is not HTTPS.
So I can't force an update to the Tomcat XML, and I have to use HTTP between nginx and Tomcat.
Any ideas? Is there some way I can affect how Tomcat reads its config in Version 2 so that it ignores the HTTPS-only section?
© Server Fault or respective owner
