Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Deleted user
0 / 0 points
Next:
badges earned

Your Points Tracker
Challenges
Leaderboard
  • Global
  • Feed

Badge for your thoughts?

You're enrolled in our new beta rewards program. Join our group to get the inside scoop and share your feedback.

Join group
Recognition
Give the gift of kudos
You have 0 kudos available to give
Who do you want to recognize?
Why do you want to recognize them?
Kudos
Great job appreciating your peers!
Check back soon to give more kudos.

Past Kudos Given
No kudos given
You haven't given any kudos yet. Share the love above and you'll see it here.

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Disable http access to our Confluence server

I implemented https using a solution posted in Community, but the Confluence can still be accessed using port 8090.

<Connector acceptCount="100" connectionTimeout="20000" disableUploadTimeout="true"
enableLookups="false" maxHttpHeaderSize="8192" maxThreads="150" minSpareThreads="25" port="8090"
protocol="HTTP/1.1" redirectPort="8443" useBodyEncodingForURI="true"
scheme="https" proxyName="confluence.ourcompany.com" proxyPort="443"/>

We are using an F5 redirect to port 8090.  How can we implement https without allowing access via port 8090?

1 answer

0 votes

Hi @Joe Budzowski 
I hope you are well.

Based on your description you are offloading SSL on the F5 load balancer.
Therefore, any connection from F5 to the Confluence server is made over HTTP.

In this case, you still need to allow HTTP connections when the source is your F5 load balancer servers, and may want to block anything from other sources, such as users' computers.

You may need to use some external solution to administer this requirement, such as iptables on Linux.
With iptables you would be able to allow access to the TCP port 8090 from F5 while blocking access from any other source.
You may also want to allow access from other specific sources, such as a jump server, for maintenance purposes.

Let me know if that makes sense to you.

Kind regards,
Thiago Masutti

Suggest an answer

Log in or Sign up to answer
DEPLOYMENT TYPE
SERVER
VERSION
7.4.7
TAGS
Community showcase
Published in Confluence

🥓🙅🏻‍♀️ Meet-less May Badge!

Hello Confluence Community!  What if i told you that you could have a healthier life and be 100% meet-less? This month, we're promoting a healthy, balanced work diet with Confluence. (Read m...

388 views 3 18
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you