Home/ Questions/Q 8534613
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-11T10:14:08+00:00

We want to front-end our Tomcat instance with an Apache instance (running on the

  • 0

We want to front-end our Tomcat instance with an Apache instance (running on the same machine) that will be serving everything on HTTPS and connect Apache to Tomcat using AJP. When using AJP, do we need to do anything to make sure that the connection between Apache and Tomcat is secure? (We dont want passwords to be sniffable on the network between Apache and Tomcat). The O/S is Red Hat Enterprise Linux 6.3

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You are saying

    Tomcat instance with an Apache instance (running on the same machine)

    and later you are saying

    We dont want passwords to be sniffable on the network between Apache and Tomcat

    This just contradicts each other.

    EDIT: AJP is not designed to be secure, if you need security, use mod_proxy_http and proxy over https, or create SSH tunnel. Needless to say, you will have to pay for this overhead.

    • 0