Proxing to tomcat with httpd Jean-Frederic Clere Principal Software Engineer / Red Hat What I will cover ● Proxy what and why. ● Protocols – AJP – HTTP/HTTPS (1.1) – HTTP/2 (H2 and H2C) – Others h2c, h2 – https /TLS proxying ● Demo ● QUESTIONS? 10/12/22 2 Who I am Jean-Frederic Clere Red Hat Years writing JAVA code and server software Tomcat committer since 2001 Doing OpenSource since ● Keep the overhead of h2 in the proxy 12 10/12/22 Other proxies ● HAProxy (in the cloud / openshift for example) ● mod_cluster (httpd dynamic load balancer) ● Undertow proxy (jboss servlet container)

overwrite that file with arbitrary data. If the log files themselves are writeable (by a non-root user), then someone may be able to overwrite the log itself with bogus data. 13http://httpd.apache.org/lists A filter is a process that is applied to data that is sent or received by the server. Data sent by clients to the server is processed by input filters while data sent by the server to the client is processed processed by output filters. Multiple filters can be applied to the data, and the order of the filters can be explicitly specified. Filters are used internally by Apache to perform functions such as chunking

likely degrade performance. Operating System Caching Almost all modern operating systems cache file-data in memory managed directly by the kernel. This is a powerful feature, and for the most part operating header" file, which includes meta-information about the URL, such as when it is due to expire and a ".data" file which is a verbatim copy of the content to be served. In the case of a content negotiated via a ".vary" directory will be created for the URL in question. This directory will have multiple ".data" files corresponding to the differently negotiated content. Maintaining the Disk Cache Although

likely degrade performance. Operating System Caching Almost all modern operating systems cache file-data in memory managed directly by the kernel. This is a powerful feature, and for the most part operating header" file, which includes meta-information about the URL, such as when it is due to expire and a ".data" file which is a verbatim copy of the content to be served. In the case of a content negotiated via a ".vary" directory will be created for the URL in question. This directory will have multiple ".data" files corresponding to the differently negotiated content. Maintaining the Disk Cache Although

likely degrade performance. Operating System Caching Almost all modern operating systems cache file-data in memory managed directly by the kernel. This is a powerful feature, and for the most part operating header" file, which includes meta-information about the URL, such as when it is due to expire and a ".data" file which is a verbatim copy of the content to be served. In the case of a content negotiated via a ".vary" directory will be created for the URL in question. This directory will have multiple ".data" files corresponding to the differently negotiated content. Maintaining the Disk Cache Although

likely degrade performance. Operating System Caching Almost all modern operating systems cache file-data in memory managed directly by the kernel. This is a powerful feature, and for the most part operating header" file, which includes meta-information about the URL, such as when it is due to expire and a ".data" file which is a verbatim copy of the content to be served. In the case of a content negotiated via a ".vary" directory will be created for the URL in question. This directory will have multiple ".data" files corresponding to the differently negotiated content. Maintaining the Disk Cache Although

. . . . . . . . . . . . . . . . . . . . . . . . . . . 582 CONTENTS vii 10.37 Apache Module mod data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 585 10.38 Apache Module loaded, it will now set some default timeouts. • MOD DUMPIO: DUMPIOLOGLEVEL is no longer supported. Data is always logged at LOGLEVEL trace7. • On Unix platforms, piped logging commands configured using now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. • Multi-language error documents from 2.2.x may not work unless they are adjusted

loaded, it will now set some default timeouts. mod_dumpio: DumpIOLogLevel is no longer supported. Data is always logged at LogLevel trace7. On Unix platforms, piped logging commands configured using either now skip compression if it knows that the size overhead added by the compression is larger than the data to be compressed. Multi-language error documents from 2.2.x may not work unless they are adjusted mod_buffer Provides for buffering the input and output filter stacks mod_data Convert response body into an RFC2397 data URL mod_ratelimit Provides Bandwidth Rate Limiting for Clients mod_request

likely degrade performance. Operating System Caching Almost all modern operating systems cache file-data in memory managed directly by the kernel. This is a powerful feature, and for the most part operating header" file, which includes meta- information about the URL, such as when it is due to expire and a ".data" file which is a verbatim copy of the content to be served. In the case of a content negotiated via a ".vary" directory will be created for the URL in question. This directory will have multiple ".data" files corresponding to the differently negotiated content. Maintaining the Disk Cache Although

likely degrade performance. Operating System Caching Almost all modern operating systems cache file-data in memory managed directly by the kernel. This is a powerful feature, and for the most part operating header" file, which includes meta-information about the URL, such as when it is due to expire and a ".data" file which is a verbatim copy of the content to be served. In the case of a content negotiated via a ".vary" directory will be created for the URL in question. This directory will have multiple ".data" files corresponding to the differently negotiated content. Maintaining the Disk Cache Although