5.2.3. Setting up a Tomcat for a front-end

Warning

You are looking at documentation for an older release. Not what you want? See the current release documentation.

Base configuration for Tomcat

The tomcat configuration must be adapted to be used behind a http frontend.

An HTTP Connector must be declares and specifically configured to reply to the reverse proxy. In the server.xml file, add or edit a HTTP connecter :
```
<Connector address="127.0.0.1" scheme="http" secure="false" proxyName="community-qa.exoplatform.com" port="8080" protocol="org.apache.coyote.http11.Http11NioProtocol"
  enableLookups="false" redirectPort="8443" bindOnInit="false"
  connectionTimeout="20000" disableUploadTimeout="true"
  URIEncoding="UTF-8"
  compression="off" compressionMinSize="2048"
  noCompressionUserAgents=".*MSIE 6.*" compressableMimeType="text/html,text/xml,text/plain,text/css,text/javascript" />
```
Note
The complete documentation of the Tomcat connector can be found https://tomcat.apache.org/tomcat-7.0-doc/config/http.html
This is a standard connector configuration with the important paramters for a reverse proxy context :
scheme
If your reverse proxy acts as a ssl termination, specify https, specify https otherwise
secure
If your reverse proxy acts as a ssl termination, specify true, specify false otherwise
proxyName
The name of eXo Platform instance as viewed by the user
bindOnInit
Must be set to false to avoid the connector to be started before eXo Platform was completely deployed and ready to respond.
A valve must be added to retreive the original user information like ip, scheme instead of the reverse-proxy properties. In the section Engine / Host of the server.xml, add this definition:
```
<Valve className="org.apache.catalina.valves.RemoteIpValve" internalProxies="127.0.0.1" remoteIpHeader="x-forwarded-for" proxiesHeader="x-forwarded-by" protocolHeader="x-forwarded-proto" />
```
Parameters
internalProxies
Declare your reverse proxy ips. IP range accepted
*Header
The name of the headers your reverse proxy will set. The values on the example are the default names used by most of the reverse proxies. It's true for Apache, it must be explicitely specified for nginx.
Note
The complete documentation of the RemoteIpHeader is available here

See also

Enabling HTTPS

5.2.3. Setting up a Tomcat for a front-end

Warning

Note

Note