【分享】apache+tomcat集群

ecoolper

apache+tomcat集群，关键代码如下

1. <VirtualHost *:443>
   
2.   SSLEngine on
   
3.   ServerName ecoolper.com:443
   
4.   SSLCertificateFile "${SRVROOT}/conf/ssl/ecoolper.com.cer"
   
5.   SSLCertificateKeyFile "${SRVROOT}/conf/ssl/ecoolper.com.key"
   
6.   DocumentRoot "${SRVROOT}/htdocs"
   
7.   ProxyPass / balancer://cluster/ stickysession=JSESSIONID nofailover=Off
   
8.   ProxyPassReverse / balancer://cluster/
   
9. # DocumentRoot access handled globally in httpd.conf
   
10.         CustomLog "${SRVROOT}/logs/ssl_request.log" \
    
11.           "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"
    
12.         <Directory "${SRVROOT}/htdocs">
    
13.                 Options Indexes Includes FollowSymLinks
    
14.                 AllowOverride AuthConfig Limit FileInfo
    
15.     Require all granted
    
16.         </Directory>
    
17. </virtualhost>
    
18. 
    
19. ProxyRequests Off
    
20. <proxy balancer://cluster>
    
21.         #加入需要负载均衡的服务地址 loadfactor为权重 route的路由地址后续在tomcat中配置
    
22.         BalancerMember ajp://10.147.14.92:8009 loadfactor=1 route=tomcat1
    
23.         #BalancerMember ajp://10.147.14.93:8009 loadfactor=1 route=tomcat2
    
24.         #按照权重
    
25.         ProxySet lbmethod=bytraffic  
    
26.         #按负载量，也就是往负载少的派发新请求        
    
27.         #ProxySet lbmethod=bybusyness
    
28.         #按照请求次数均衡(默认)  
    
29.         #ProxySet lbmethod=byrequests
    
30. </proxy>

复制代码

lyc_0809

ajp前段时间说是有漏洞，请问怎么处理？

ecoolper

1、tomcat注释掉ajp协议；
2、apache转发修改为http协议
看下面代码

1. <VirtualHost *:443>
   
2.   SSLEngine on
   
3.   ServerName ecoolper.com:443
   
4.   SSLCertificateFile "${SRVROOT}/conf/ssl/ecoolper.com.cer"
   
5.   SSLCertificateKeyFile "${SRVROOT}/conf/ssl/ecoolper.com.key"
   
6.   DocumentRoot "${SRVROOT}/htdocs"
   
7.   ProxyPass / balancer://cluster/ stickysession=JSESSIONID nofailover=Off
   
8.   ProxyPassReverse / balancer://cluster/
   
9. # DocumentRoot access handled globally in httpd.conf
   
10.         CustomLog "${SRVROOT}/logs/ssl_request.log" \
    
11.           "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x "%r" %b"
    
12.         <Directory "${SRVROOT}/htdocs">
    
13.                 Options Indexes Includes FollowSymLinks
    
14.                 AllowOverride AuthConfig Limit FileInfo
    
15.     Require all granted
    
16.         </Directory>
    
17. </virtualhost>
    
18. 
    
19. ProxyRequests Off
    
20. <proxy balancer://cluster>
    
21.         #加入需要负载均衡的服务地址 loadfactor为权重 route的路由地址后续在tomcat中配置
    
22.         BalancerMember http://10.147.14.92:8080 loadfactor=1 route=tomcat1
    
23.         #BalancerMember http://10.147.14.93:8080 loadfactor=1 route=tomcat2
    
24.         #按照权重
    
25.         ProxySet lbmethod=bytraffic  
    
26.         #按负载量，也就是往负载少的派发新请求        
    
27.         #ProxySet lbmethod=bybusyness
    
28.         #按照请求次数均衡(默认)  
    
29.         #ProxySet lbmethod=byrequests
    
30. </proxy>

复制代码

lyc_0809

学习