Clere Principal Software Engineer / Red Hat What I will cover ● Proxy what and why. ● Protocols – AJP – HTTP/HTTPS (1.1) – HTTP/2 (H2 and H2C) – Others proxy and Other protocols (web-socket etc) ● translations 10/12/22 5 AJP ● When – Easy TLS/SSL forwarding ● Limitations – No upgrade – Header size – No encryption – Limited “authentication” (secret) ● mod_proxy_ajp and mod_jk 10/12/22 6 ) – HTTP if you trust your intranet. (really?) ● Other reasons: – HTTP is more developed than AJP 10/12/22 7 Comparations mod_jk / mod_proxy 4KiB.bin 8KiB.bin 16KiB.bin 32KiB.bin 64KiB.bin

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 587 10.59 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 611 10.60 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat2. Regular Expression provided by MOD PROXY. The proxying capabilities for AJP13, CONNECT, FTP, HTTP and the balancer are provided by the separate modules MOD PROXY AJP, MOD PROXY CONNECT, MOD PROXY FTP, MOD PROXY HTTP and

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 709 10.76 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 735 10.77 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression information.) • one or more proxy scheme, or protocol, modules: Protocol Module AJP13 (Apache JServe Protocol version 1.3) MOD PROXY AJP CONNECT (for SSL) MOD PROXY CONNECT FastCGI MOD PROXY FCGI ftp MOD PROXY

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 708 10.76 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 734 10.77 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression information.) • one or more proxy scheme, or protocol, modules: Protocol Module AJP13 (Apache JServe Protocol version 1.3) MOD PROXY AJP CONNECT (for SSL) MOD PROXY CONNECT FastCGI MOD PROXY FCGI ftp MOD PROXY

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778 10.80 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805 10.81 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression information.) • one or more proxy scheme, or protocol, modules: Protocol Module AJP13 (Apache JServe Protocol version 1.3) MOD PROXY AJP CONNECT (for SSL) MOD PROXY CONNECT FastCGI MOD PROXY FCGI ftp MOD PROXY

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 768 10.79 Apache Module mod proxy ajp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 795 10.80 Apache Module mod The new MOD PROXY BALANCER module provides load balancing services for MOD PROXY. The new MOD PROXY AJP module adds support for the Apache JServ Protocol version 1.3 used by Apache Tomcat3. Regular Expression information.) • one or more proxy scheme, or protocol, modules: Protocol Module AJP13 (Apache JServe Protocol version 1.3) MOD PROXY AJP CONNECT (for SSL) MOD PROXY CONNECT FastCGI MOD PROXY FCGI ftp MOD PROXY

Deploying Django How to deploy with WSGI Deployment checklist How to use Django with FastCGI, SCGI, or AJP Upgrading Django to a newer version Required Reading Dependencies Installation Testing Deployment tests | Included testing tools | Advanced topics Deployment: Overview | WSGI servers | FastCGI/SCGI/AJP (deprecated) | Deploying static files | Tracking code errors by email The admin Find all you need support is deprecated and will be removed in Django 1.9. How to use Django with FastCGI, SCGI, or AJP If you’re new to deploying Django and/or Python, we’d recommend you try mod_wsgi first. In most cases

more. 5.2.1. Changing default ports By default Tomcat runs a HTTP connector on port 8080 and an AJP connector on port 8009. You might want to change those default ports to avoid conflict with another connectionTimeout="20000" redirectPort="8443" /> ... 5.2.2. Changing JVM used By default Tomcat will run preferably with OpenJDK

tests | Included testing tools | Advanced topics • Deployment: Overview | WSGI servers | FastCGI/SCGI/AJP (deprecated) | Deploying static files | Tracking code errors by email 1.8 The admin Find all you support is deprecated and will be removed in Django 1.9. 4.7.3 How to use Django with FastCGI, SCGI, or AJP Deprecated since version 1.7: FastCGI support is deprecated and will be removed in Django 1.9. Although which protocols such as FastCGI, SCGI or AJP are the only viable options. Note This document primarily focuses on FastCGI. Other protocols, such as SCGI and AJP, are also supported, through the flup Python

macros have been defined: {$PROTOCOL_HANDLER_HTTP}, {$PROTOCOL_HANDLER_HTTPS}, {$PROTO- COL_HANDLER_AJP} 10 Upgrade notes for 3.0.0 These notes are for upgrading from Zabbix 2.4.x to Zabbix 3.0.0. All