Apache, Tomcat and mod proxy http set up

Question

I am running a web application on Tomcat (port 8080) with Apache (port 80) in front (on Ubuntu) using mod-proxy_http as the connector. The app is available through port 80 but also through port 8080. This is actually quite useful (when deploying/testing).

Are there are any particular disadvantages/vulnerabilities with keeping port 8080 open in this way?

Valchev · Accepted Answer · 2011-12-08 10:34:22Z

2

My opinion is that you should close 8080 port, or at least allow it for certain host/IP. Less open ports, less problems. Opening port 8080 could let attacker to have more entry points (80 and 8080, using different technologies) and exploit different techniques. Also HTTPd server has much better security modules.

Have you consider using mod_ajp_proxy?

Hope this helps.

answered Dec 8, 2011 at 10:34

Valchev

1,53014 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dan MacBean Over a year ago

I looked at mod_ajp_proxy but found the http easier to understand and set up (my first time setting up this type of thing). But really I'd like to keep the http because it allows sanity testing of a new deployment of app (while a maintenance page is being served through port 80). I find this very useful.

Valchev Over a year ago

I think that you can achieve same easy of development/testing if you allow access to port 8080 only for specific IPs. It's much better from security point of view.

Collectives™ on Stack Overflow

Apache, Tomcat and mod proxy http set up

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related