0

Configure HTTP Server

It is highly recommended for production deployment to have Apache HTTP Server configured with the Incorta Application Server. You can choose to either configure Apache HTTP Server as a reverse-proxy only (to redirect incoming requests to different servers for security purposes), or as a load balancer (which will also act as a reverse-proxy), in a High Availability (HA) environment. Read along to learn about the configuration steps.

In a nutshell, in order to set up the HTTP Server, you need to:

  1. Create a file named “<filename>.conf” to include the port/node configuration parameters. (You may also use the attached sample file and provide your parameters.)
     
  2. Edit the Apache configuration file “HTTPD.CONF” to include the file path created in Step 1.
     
  3. Configure the Tomcat application server to disable all listening ports except for the AJP Connector Port, set in the configuration file created in step 1.
     
  4. Restart Apache HTTP Server.

Read the “Before you start…” section to ensure your system is ready for this configuration. Then, you will find detailed steps explaining to complete the Apache HTTP Server configuration.

Before you start...

Before starting the configuration steps, make sure that Apache is installed on your system. By default, Apache is installed on Mac and Linux systems (in the “etc” folder).

To find out if Apache is installed on,

  • Mac or Linux (CentOS):

           1- Open a terminal.
           2- Type apachectl -v.            

  • Windows:

For most windows OS, the Apache is located in the Program Files folder. (e.g. c:/Program Files/Apache Group/Apache2/bin/Apache.exe)

Now that you ensured Apache is installed on your system, the following steps will help you configure the Apache HTTP Server:

Step 1: Configure the Apache HTTP Server (including the load balancer).

Step 2: Configure the Tomcat Application Server.

Step 3: Restart the Apache HTTP Server.

Step 1: Configure the Apache HTTP Server.

The following steps will show you how to configure the Apache HTTP Server as a reverse-proxy, and as a load balancer (which will also act as a reverse-proxy):

I. Create a folder named “conf.d” to contain the “<File_Name>.conf” ports/nodes configuration parameters file (e.g. incorta.conf). Note this directory to add its path to the “httpd.conf” configuration file as shown in step II.

    1. To set up a load balancer, go to step (I. 2). To set up a reverse-proxy, create a file, or use the following sample file, to include your system port parameters, then go to step II:

      #Set the Apache Server listening port, which will redirect #incoming requests to the AJP connector port set below.
      Listen <Port_Number> (e.g. 90)
      <VirtualHost *:<Port_Number>
      <Proxy *>
      AddDefaultCharset Off
      Order deny,allow
      Allow from all
      </Proxy>

      #Set the tomcat AJP connector port number.
      ProxyPass /incorta     ajp://<IP_Address>:<Port_Number(e.g.8009)>/incorta
      </VirtualHost>
       
    2. Create a file with the following configuration parameters, or use the following sample file, to include your system port parameters:

      # ---------------------------------------------------------
      # Required Modules
      # ---------------------------------------------------------

      # ---------------------------------------------------------
      # Create virtual host on port 7000
      # ---------------------------------------------------------
       Listen 7000

      NameVirtualHost *:7000

      <VirtualHost *:7000>
        ServerName <URL>
        ErrorLog <Installation_Path>/conf.d/logs/ajp.error.log
        CustomLog <Installation_Path>/conf.d/logs/ajp.log

      #-------------------------------------------------------
        # Reverse Proxy
        #-------------------------------------------------------
        <Proxy balancer://cluster>
            BalancerMember ajp://<IP_Address>:<Node1_AJP_PortNo>          
            route=<Node1_Name>
            BalancerMember ajp://<IP_Address>:<Node2_AJP_PortNo>          
            route=<Node2_Name>
        </Proxy>
        ProxyPass / balancer://cluster/ stickysession=JSESSIONID|jsessionid

      ProxyRequests Off

      <Proxy *>
             Order deny,allow
             Deny from none
             Allow from localhost
         </Proxy>

      #------------------------------------------------------
         # Balancer-manager, for monitoring
         #------------------------------------------------------
         <Location /balancer-manager>
             SetHandler balancer-manager

      Order deny,allow
             Deny from none
             Allow from localhost
         </location>
      # </VirtualHost>
       
    3. For each node, you must edit the “server.xml” file in the “<Installation_Path>/server/conf/“ directory to add the jvmRoute in the engine tag as shown below:

      <Engine name=”Catalina” defaultHost=”<IP_Address>” jvmRoute=”Node_Name”>.
       

II. Edit the “httpd.conf” Apache Server configuration file in the “Apache_Installation” directory to add the “<File_Name>.conf” configuration file path created in step I, as shown below:

Include <Configuration_File_Path>

Step 2: Configure the Tomcat Application Server.

For enhanced security measures, you may use the following steps to enable the AJP Connector port and disable all listening ports, except for that set in step 1-I.

To restrict direct access to the Incorta Analytics:

These steps will help you enable the listening and AJP Connector ports, and disable the rest of the ports:

  1. Enable the AJP Connector port. That is, the command line referencing this port is not commented (not surrounded by “!<--” and “-->”), as shown below:
    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />
     
  2. Edit the “server.xml” file in the “<Installation_Path>/server/conf/“ directory to disable all listening ports except for that set in step 1-I. To disable a port, comment out the command line addressing that port, by adding “<!--” and “-->” at the beginning and end, respectively.

    Example:

    A port command line looks like:
    <Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" URIEncoding="UTF-8" />

    To disable port 8080, comment out the code line as shown below:
    <!--<Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" URIEncoding="UTF-8" />-->

    Now that port 8080 is disabled, the Incorta Analytics web page cannot be accessed directly through this port. It can be accessed only through the listening port set in Step 1-I.

Step 3: Restart the Apache HTTP Server.

The last step is to restart the HTTP Server.

The HTTP Server is now configured and ready to use. To log in to the Incorta Analytics web app, type <IP_Address>:<Listening_PortNumber> in the browser address bar.

Reply Oldest first
  • Oldest first
  • Newest first
  • Active threads
  • Popular
Like Follow
  • 1 yr agoLast active
  • 259Views
  • 1 Following

Product Announcement

Incorta 4.9 is now Generally Available (GA)!!!