Clere Principal Software Engineer / Red Hat What I will cover ● Proxy what and why. ● Protocols – AJP – HTTP/HTTPS (1.1) – HTTP/2 (H2 and H2C) – Others proxy and Other protocols (web-socket etc) ● translations 10/12/22 5 AJP ● When – Easy TLS/SSL forwarding ● Limitations – No upgrade – Header size – No encryption – Limited “authentication” (secret) ● mod_proxy_ajp and mod_jk 10/12/22 6 ) – HTTP if you trust your intranet. (really?) ● Other reasons: – HTTP is more developed than AJP 10/12/22 7 Comparations mod_jk / mod_proxy 4KiB.bin 8KiB.bin 16KiB.bin 32KiB.bin 64KiB.bin

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587 10.59 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 611 10.60 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat2. Regular Expression provided by MOD PROXY. The proxying capabilities for AJP13, CONNECT, FTP, HTTP and the balancer are provided by the separate modules MOD PROXY AJP, MOD PROXY CONNECT, MOD PROXY FTP, MOD PROXY HTTP and

The new mod_proxy_balancer module provides load balancing services for mod_proxy. The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression provided by mod_proxy. The proxying capabilities for AJP13, CONNECT, FTP, HTTP and the balancer are provided by the separate modules mod_proxy_ajp, mod_proxy_connect, mod_proxy_ftp, mod_proxy_http and enabled with --enable-proxy. --enable-proxy-ajp Enable proxy support for AJP13 (Apache JServ Protocol 1.3) request handling, which is provided by mod_proxy_ajp. This module is an extension for the mod_proxy

The new mod_proxy_balancer module provides load balancing services for mod_proxy. The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression provided by mod_proxy. The proxying capabilities for AJP13, CONNECT, FTP, HTTP and the balancer are provided by the separate modules mod_proxy_ajp, mod_proxy_connect, mod_proxy_ftp, mod_proxy_http and enabled with --enable-proxy. --enable-proxy-ajp Enable proxy support for AJP13 (Apache JServ Protocol 1.3) request handling, which is provided by mod_proxy_ajp. This module is an extension for the mod_proxy

The new mod_proxy_balancer module provides load balancing services for mod_proxy. The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression provided by mod_proxy. The proxying capabilities for AJP13, CONNECT, FTP, HTTP and the balancer are provided by the separate modules mod_proxy_ajp, mod_proxy_connect, mod_proxy_ftp, mod_proxy_http and enabled with --enable-proxy. --enable-proxy-ajp Enable proxy support for AJP13 (Apache JServ Protocol 1.3) request handling, which is provided by mod_proxy_ajp. This module is an extension for the mod_proxy

The new mod_proxy_balancer module provides load balancing services for mod_proxy. The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression provided by mod_proxy. The proxying capabilities for AJP13, CONNECT, FTP, HTTP and the balancer are provided by the separate modules mod_proxy_ajp, mod_proxy_connect, mod_proxy_ftp, mod_proxy_http and enabled with --enable-proxy. --enable-proxy-ajp Enable proxy support for AJP13 (Apache JServ Protocol 1.3) request handling, which is provided by mod_proxy_ajp. This module is an extension for the mod_proxy

The new mod_proxy_balancer module provides load balancing services for mod_proxy. The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression provided by mod_proxy. The proxying capabilities for AJP13, CONNECT, FTP, HTTP and the balancer are provided by the separate modules mod_proxy_ajp, mod_proxy_connect, mod_proxy_ftp, mod_proxy_http and enabled with --enable-proxy. --enable-proxy-ajp Enable proxy support for AJP13 (Apache JServ Protocol 1.3) request handling, which is provided by mod_proxy_ajp. This module is an extension for the mod_proxy

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 709 10.76 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 735 10.77 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression information.) • one or more proxy scheme, or protocol, modules: Protocol Module AJP13 (Apache JServe Protocol version 1.3) MOD PROXY AJP CONNECT (for SSL) MOD PROXY CONNECT FastCGI MOD PROXY FCGI ftp MOD PROXY

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 708 10.76 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 734 10.77 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression information.) • one or more proxy scheme, or protocol, modules: Protocol Module AJP13 (Apache JServe Protocol version 1.3) MOD PROXY AJP CONNECT (for SSL) MOD PROXY CONNECT FastCGI MOD PROXY FCGI ftp MOD PROXY

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778 10.80 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805 10.81 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression information.) • one or more proxy scheme, or protocol, modules: Protocol Module AJP13 (Apache JServe Protocol version 1.3) MOD PROXY AJP CONNECT (for SSL) MOD PROXY CONNECT FastCGI MOD PROXY FCGI ftp MOD PROXY