Confluence + Jira - 2 differents server but same external port ssl 443?

Julian Castello

Hello ! 

I would to change the configuration of my environnement. 

Actually, Confluence and Jira are installed on 2 virtuals Debian servers on ESX. Jira use port 8080 and confluence 9000. Something, theses ports are blocked from outside for any reason. I would to use the SSL 443 fort both. I already use the 433 for Owncloud on another server.

Is it possible to use the port 443 for the 3 applications? Is there a procedure somewhere to do that? Thank you !

Andy Heinzer

Hi Julian,

I understand you have Jira and Confluence installed to separate virtual machines and are interested in operating both of these applications using SSL over port 443.  Since each application is on a separate operating system, it is technically possible that each application could use that same port number.  However TCP/IP implementation across operating systems like Linux, Unix, Windows, Mac, will NOT allow more than one application on the same system to open a listening port like this at the same time.

I think the ideal way to resolve this would be to use a proxy, like Apache, nginx, etc.  In a setup like this that proxy application could terminate SSL and use port 443, but then it could also be configured to route requests to the appropriate application based on either the subdomain used or the context path of the URL itself.  In a setup like this it is not necessary for the native Tomcat webserver that Jira and Confluence use to actually be bound directly to using SSL on 443 on their respective virtual machines. 

I would recommend checking out the guide we have in Integrating Jira with Apache using SSL.  Even if you are not wanting to use Apache to implement this in your environment, it has a really good explanation of the suggested setup here.  There are also additional corresponding guides for nginx as well. 

• Configure Jira server to run behind a NGINX reverse proxy 
• Running Confluence behind NGINX with SSL 

Check that out and let me know if you have any follow up questions or concerns about this suggested configuration.

Andy