![]() | ![]() | ![]() | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
![]() | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
documentation examples changes overview quick start installation command-line configuration admin amber clustering caching database deployment ejb 3.0 embedding filters hessian hmtp ioc jsp logging messaging performance quercus/php remoting scheduled tasks security server push servlets third-party troubleshooting virtual hosting watchdog webapp xml and xslt <cluster> <database> <host> ports <resin> resource tags rewrite <server> session variables <web-app> index relax schema | port: port tag configuration
The port tags configure <http> ports, addresses, cluster-ports and custom protocol TCP ports.
<accept-listen-backlog> configures operating system TCP listen queue size for the port. child of http, connection-port, protocol<accept-thread-min> configures the maximum number of threads listening for new connections on this port. child of http, connection-port, protocol<accept-thread-min> configures the minimum number of threads listening for new connections on this port. child of serverThe <address> defines the IP interface for a port. A value of '*' binds to all ports. Because the <address> is specific to a server, it should only be defined in a <server> tag, not a <server-default>. default *http address <resin xmlns="http://caucho.com/ns/resin"> <cluster id="web-tier"> <server id="web-a" address="192.168.1.1" port="6800"> <http address="10.0.1.1" port="80"/> </server> <server id="web-b" address="192.168.1.2" port="6800"> <http address="10.0.1.2" port="80"/> </server> ... </cluster> </resin> <ca-certificate-file> configures the path to a CA certificate file for intermediate CA support. child of http, protocol, cluster-port<ca-certificate-path> configures the path to a CA certificate directory for intermediate CA support. child of http, protocol, cluster-port<ca-revocation-file> configures the path to a list of revoked CA certificates. child of http, protocol, cluster-port<ca-revocation-path> configures the path to a list of revoked CA certificates. child of http, protocol, cluster-port<certificate-file> configures the path to the server's SSL certificate. child of http, protocol, cluster-port<certificate-chain-file> configures the path to the server's SSL certificate for OpenSSL. child of http, protocol, cluster-port<certificate-key-file> configures the path to the server's SSL private key certificate for OpenSSL. child of http, protocol, cluster-port<cipher-suite> configures the path to the server's SSL cryptographic ciphers. child of server<cluster-port> configures the cluster and load balancing socket, for load balancing, distributed sessions, and distributed management. When configuring Resin in a load-balanced cluster, each Resin instance will have its own <srun> configuration, which Resin uses for distributed session management and for the load balancing itself. When configuring multiple JVMs, each <srun> will have a unique <server-id> which allows the -server command-line to select which ports the server should listen to.
The class that corresponds to <srun> is com.caucho.server.cluster.ClusterPort child of server<connection-max> configures the maximum number of concurrent connections on this port. child of server<http> configures a HTTP or HTTPS port listening for HTTP requests. When configuring multiple JVMs, each <http> will have a unique <server-id> which allows the -server command-line to select which ports the server should listen to.
The <jsse-ssl> configures the port to use JSSE for SSL support. The SSL section of the Security documentation provides a comprehensive overview of SSL.
<keepalive-max> configures the maximum number of keepalives on this port. child of http, protocol, cluster-port<openssl> configures the port to use OpenSSL for SSL support (requires Resin Professional). OpenSSL is a fast C implementation of SSL security used by Apache. Resin's configuration is OpenSSL follows Apache's configuration, so any documentation on installing SSL certificates can use documentation for Apache. The SSL section of the Security documentation provides a comprehensive overview of SSL.
<password> configures the SSL private key certificate password. child of http, protocol, serverThe <port> defines the TCP port the HTTP or protocol should bind to. http port <resin xmlns="http://caucho.com/ns/resin"> <cluster id="web-tier"> <server id="web-a" address="192.168.1.1" port="6800"> <http address="10.0.1.1" port="80"/> <http address="192.168.1.1" port="8080"/> </server> ... </cluster> </resin> <protocol> configures custom socket protocols using Resin's thread and connection management. The custom protocol will extend from com.caucho.server.port.Protocol. <resin xmlns="http://caucho.com/ns/resin"> <cluster id="web-tier"> <server id="a"> <protocol address="localhost" port="8888"> <type>example.Magic8BallProtocol</type> </port> </server> </cluster> </resin> <protocol> configures the SSL allowed protocols. child of openssl<session-cache> configures the SSL session cache. child of openssl<session-cache> configures the SSL session cache timeout. child of http, cluster-port, protocol, server<socket-timeout> overrides the socket timeout from the <server>. child of http, protocol, cluster-portSets the tcp-no-delay parameter. child of openssl<unclean-shutdown> configures the OpenSSL unclean shutdown on connection close. child of openssl<verify-client> sets the client certificate configuration. If the certificate is available, it will be put in the javax.servlet.request.X509Certificate request attribute.
Obtaining the client certificate X509Certificate []certs = (X509Certificate []) request.getAttribute("javax.servlet.request.X509Certificate"); <verify-depth> configures the OpenSSL client verification depth.
|