Questions about proxy and server.xml

David Karlsson

My JIRA instance was recently put under a proxy so that external users could access it without the need for a VPN-client. However the proxy serves pages via HTTPS, and tomcat serves them over HTTP. I can't change the port on which the proxy forwards the requests, thus I'm stuck using port 80 on tomcat.

JIRA is now reporting some errors related to this, some dashboard widgets do not work, and I can't get my head around the documentation, since it assumes that I have control over the proxy, which I do not.

Could someone hint on how I should modify my server.xml to get rid of the errors?
I've made the BASE URL-changes in JIRA, and turned off GZIP-compression. 

And Admin, this is not spam. Nor was the previous question... 

RobertH

It shouldn't be an issue that tomcat is listening on port 80 since the HTTPS proxy is running on 443, the default HTTPS port.  (assumption)  Whether tomcat runs over SSL or not really has no bearing on the situation because the proxy is running on SSL and is handling the security.  Here's an example configuration on our instance:

<Connector port="8091"
        maxThreads="150"
        minSpareThreads="25"
        connectionTimeout="20000"
        enableLookups="false"
        maxHttpHeaderSize="8192"
        protocol="HTTP/1.1"
        useBodyEncodingForURI="true"
        acceptCount="100"
        disableUploadTimeout="true"
        secure="true" 
        proxyName="jiratest.mydomain.com" proxyPort="443" scheme="https" />

So in this example you should change the proxyName to whatever the https URL is for your domainm the rest can stay but you should take into account your instance size and more when working our the MaxThreads, minSpareThreads, connectionTimeout and more.  

Now there's a couple ways to get the redirect for your site to function as expected:

• Have the administrator of your proxy put in a simple rewrite to rewrite all requests for http to https.  This is by far the easiest way to manage this and the administrators should have no problem doing this.  
• You can setup a connector on port 80 that has a redirect port for 443; however, then you'll need to have access to the proxy to change the port that it connects on.  

At this point, it seems like you're going to need some interaction with the proxy administrators unless anyone else has a clever idea.