Proxing to tomcat with httpd Jean-Frederic Clere Principal Software Engineer / Red Hat What I will cover ● Proxy what and why. ● Protocols – AJP – HTTP/HTTPS (1.1) – HTTP/2 (H2 and H2C) – Others 10/12/22 2 Who I am Jean-Frederic Clere Red Hat Years writing JAVA code and server software Tomcat committer since 2001 Doing OpenSource since 1999 Cyclist/Runner etc Lived 15 years in Spain (Barcelona) – Using SSLValve ● HTTP/HTTPS: – HTTPS might be needed (Encryption/Authentication) – HTTPS on tomcat (openssl again?) – HTTP if you trust your intranet. (really?) ● Other reasons: – HTTP is more

The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat2. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library3 also a new MOD AUTHN ALIAS module for simplifying certain authentication configurations. 2http://tomcat.apache.org/ 3http://www.pcre.org/ 1.2. OVERVIEW OF NEW FEATURES IN APACHE 2.2 5 MOD AUTHNZ LDAP ? untested Third Party Modules’ Status Module Status Notes JKa (Formerly mod jserv) ahttps://tomcat.apache.org/connectors- doc-archive/jk2/ - JAVA still being ported. mod php3a ahttp://www.php.net/

The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library error_log | tail -n 10 The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability, the second example will list the features has been added to avoid problem with hung and busy Tomcat's and require ajp13 ping/pong support which has been implemented on Tomcat 3.3.2+, 4.1.28+ and 5.0.13+. This will increase the network

The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library error_log | tail -n 10 The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability, the second example will list the features has been added to avoid problem with hung and busy Tomcat's and require ajp13 ping/pong support which has been implemented on Tomcat 3.3.2+, 4.1.28+ and 5.0.13+. This will increase the network

The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library error_log | tail -n 10 The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability, the second example will list the features has been added to avoid problem with hung and busy Tomcat's and require ajp13 ping/pong support which has been implemented on Tomcat 3.3.2+, 4.1.28+ and 5.0.13+. This will increase the network

The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library error_log | tail -n 10 The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability, the second example will list the features has been added to avoid problem with hung and busy Tomcat's and require ajp13 ping/pong support which has been implemented on Tomcat 3.3.2+, 4.1.28+ and 5.0.13+. This will increase the network

The new mod_proxy_ajp module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library error_log | tail -n 10 The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability, the second example will list the features has been added to avoid problem with hung and busy Tomcat's and require ajp13 ping/pong support which has been implemented on Tomcat 3.3.2+, 4.1.28+ and 5.0.13+. This will increase the network

The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library4 alias(already removed from 2.3/2.4) module for simplifying certain authentication configurations. 3http://tomcat.apache.org/ 4http://www.pcre.org/ 12 CHAPTER 1. RELEASE NOTES MOD AUTHNZ LDAP This module is a log | tail -n 10 The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability10, the second example will list

The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library4 alias(already removed from 2.3/2.4) module for simplifying certain authentication configurations. 3http://tomcat.apache.org/ 4http://www.pcre.org/ 12 CHAPTER 1. RELEASE NOTES MOD AUTHNZ LDAP This module is a log | tail -n 10 The first example will list the number of attacks trying to exploit the Apache Tomcat Source.JSP Malformed Request Information Disclosure Vulnerability10, the second example will list

The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression Library Updated Version 5.0 of the Perl Compatible Regular Expression Library4 alias(already removed from 2.3/2.4) module for simplifying certain authentication configurations. 3http://tomcat.apache.org/ 4http://www.pcre.org/ 14 CHAPTER 1. RELEASE NOTES MOD AUTHNZ LDAP This module is a ? untested Third Party Modules’ Status Module Status Notes JKa (Formerly mod jserv) ahttps://tomcat.apache.org/connectors- doc-archive/jk2/ - JAVA still being ported. mod php3a ahttp://www.php.net/