Defines a health checker for the parent server-ref or cluster-ref element.
none
The following table describes attributes for the health-checker element.
Table 1–56 health-checker Attributes
Attribute |
Default |
Description |
---|---|---|
/ |
Specifies the URL to ping to determine the health state of a listener. This must be a relative URL. |
|
30 |
Specifies the interval between health checks. A value of zero means that health checking is disabled. |
|
10 |
Specifies the maximum time in which a server must respond to a health check request to be considered healthy. If interval-in-seconds is greater than zero, timeout-in-seconds must be less than or equal to interval-in-seconds. |
Defines an access log file for a virtual-server. The access-log subelement of the virtual server’s parent http-service element determines the access log file’s format and rotation settings.
none
The following table describes attributes for the http-access-log element.
Table 1–57 http-access-log Attributes
Attribute |
Default |
Description |
---|---|---|
${com.sun.aas.instanceRoot}/logs/access |
(optional) Specifies the location of the access log file. |
|
true |
(optional) If true, specifies that only the IP address of the user agent is listed. If false, performs a DNL lookup. |
Configures the HTTP file cache.
none
The following table describes attributes for the http-file-cache element.
Table 1–58 http-file-cache Attributes
Attribute |
Default |
Description |
---|---|---|
true |
(optional) If true, enables the file cache. |
|
on |
(optional) If on, enables caching of the file content if the file size exceeds the medium-file-size-limit-in-bytes. |
|
30 |
(optional) Specifies the maximum age of a file cache entry. |
|
537600 |
(optional) Specifies the maximum size of a file that can be cached as a memory mapped file. |
|
10485760 |
(optional) Specifies the total size of all files that are cached as memory mapped files. |
|
2048 |
(optional) Specifies the maximum size of a file that can be read into memory. |
|
1048576 |
(optional) Specifies the total size of all files that are read into memory. |
|
false |
(optional) If true, enables the use of TransmitFileSystem calls. Meaningful only for Windows. |
|
1024 |
(optional) Specifies the maximum number of files in the file cache. |
|
0 |
(optional) Specifies the initial number of hash buckets. |
Defines an HTTP listen socket. The connection-pool subelement of the parent http-service element also configures some listen socket settings.
The following table describes subelements for the http-listener element.
Table 1–59 http-listener Subelements
Element |
Required |
Description |
---|---|---|
zero or one |
Defines SSL parameters. |
|
zero or more |
Specifies a property or a variable. |
The following table describes attributes for the http-listener element.
Table 1–60 http-listener Attributes
Attribute |
Default |
Description |
---|---|---|
none |
The unique listener name. An http-listener name cannot begin with a number. |
|
none |
IP address of the listener. Can be in dotted-pair or IPv6 notation. Can be any (for INADDR_ANY) to listen on all IP addresses. Can be a hostname. |
|
none |
Port number on which the listener listens. Legal values are 1 - 65535. On UNIX, creating sockets that listen on ports 1 - 1024 requires superuser privileges. Configuring an SSL listener to listen on port 443 is standard. |
|
none |
(optional) Specifies the external port on which the connection is made. |
|
inet |
(optional) Specifies whether the IP address is an inet or ncsa address. |
|
false |
(optional) If true, enables blocking on both the external and listener ports. |
|
1 |
(optional) Number of acceptor threads for the listener, typically the number of processors in the machine. Legal values are 1 - 1024 . |
|
false |
(optional) Determines whether the listener runs SSL. To turn SSL2 or SSL3 on or off and set ciphers, use an ssl subelement. |
|
none |
References the id attribute of the default virtual-server for this particular listener. |
|
none |
Tells the server what to put in the host name section of any URLs it sends to the client. This affects URLs the server automatically generates; it doesn’t affect the URLs for directories and files stored in the server. If your server uses an alias, the server-name should be the alias name. If a colon and port number are appended, that port is used in URLs the server sends to the client. If load balancing is enabled, use the server name of the load balancer. |
|
none |
(optional) If the listener is supporting non-SSL requests and a request is received for which a matching <security-constraint> requires SSL transport, the request is automatically redirected to the port number specified here. If load balancing is enabled, use the redirect port of the load balancer. |
|
true |
(optional) If true, X-Powered-By headers are used according to the Servlet 2.4 and JSP 2.0 specifications. |
|
enabled |
true |
(optional) Determines whether the listener is active. |
The following table describes properties for the http-listener element. Any of these properties can be defined as an http-service property, so that it applies to all http-listener elements.
Table 1–61 http-listener Properties
Property |
Default |
Description |
---|---|---|
false |
If true, indicates that this http-listener element receives traffic from an SSL-terminating proxy server. Overrides the authPassthroughEnabled property of the parent http-service element. |
|
com.sun.enterprise.web.ProxyHandlerImpl |
Specifies the fully qualified class name of a custom implementation of the com.sun.appserv.ProxyHandler abstract class that this http-listener uses. Only used if the authPassthroughEnabled property of this http-listener and the parent http-service element are both set to true. Overrides the proxyHandler property of the parent http-service element. |
Configures HTTP protocol settings.
none
The following table describes attributes for the protocol element.
Table 1–62 protocol Attributes
Attribute |
Default |
Description |
---|---|---|
HTTP/1.1 |
(optional) Specifies the version of the HTTP protocol used. |
|
true |
(optional) If true, looks up the DNS entry for the client. |
|
ISO-8859-1;en;ISO-8859-1 |
(optional) Specifies the response type used if no MIME mapping is available that matches the file extension. The format is a semicolon-delimited string consisting of the content-type, encoding, language, and charset. |
|
text/html;ISO-8859-1;en;ISO-8859-1 |
(optional) Specifies the default response type. The format is a semicolon-delimited string consisting of the content-type, encoding, language, and charset. |
|
true |
(optional) If true, globally enables SSL for all http-listener subelements of the parent http-service element. |
Defines the HTTP service.
The following table describes subelements for the http-service element.
Table 1–63 http-service Subelements
Element |
Required |
Description |
---|---|---|
zero or one |
Defines access log settings for each http-access-log subelement of each virtual-server. |
|
one or more |
Defines an HTTP listen socket. |
|
one or more |
Defines a virtual server. |
|
zero or one |
Configures request processing threads. |
|
zero or one |
Configures keep-alive threads. |
|
zero or one |
Defines a pool of client HTTP connections. |
|
zero or one |
Configures HTTP protocol settings. |
|
zero or one |
Configures the HTTP file cache. |
|
zero or more |
Specifies a property or a variable. |
The following table describes properties for the http-service element, which configure SSL for all http-listener subelements.
Table 1–64 http-service Properties
Property |
Default |
Description |
---|---|---|
true |
If true, enables the monitoring cache. |
|
5000 |
Specifies the interval between refreshes of the monitoring cache. |
|
10000 |
Specifies the number of SSL sessions to be cached. |
|
86400 |
Specifies the interval at which SSL3 sessions are cached. |
|
1048576 |
Specifies the maximum amount of data cached during the handshake phase. |
|
60 |
Specifies the timeout for the client certificate phase. |
|
100 |
Specifies the interval at which SSL2 sessions are cached. |
|
100 |
Specifies the keep-alive latency. |
|
100 |
Specifies the upper limit to the time slept after polling keep-alive connections for further requests. |
|
depends on operating system |
Specifies the maximum stack size of the native thread. |
|
false |
If true, indicates that the http-listener subelements receive traffic from an SSL-terminating proxy server, which is responsible for forwarding any information about the original client request (such as client IP address, SSL keysize, and authenticated client certificate chain) to the HTTP listeners using custom request headers. Each http-listener subelement can override this setting for itself. |
|
com.sun.enterprise.web.ProxyHandlerImpl |
Specifies the fully qualified class name of a custom implementation of the com.sun.appserv.ProxyHandler abstract class, which allows a back-end application server instance to retrieve information about the original client request that was intercepted by an SSL-terminating proxy server (for example, a load balancer). An implementation of this abstract class inspects a given request for the custom request headers through which the proxy server communicates the information about the original client request to the Application Server instance, and returns that information to its caller. The default implementation reads the client IP address from an HTTP request header named Proxy-ip, the SSL keysize from an HTTP request header named Proxy-keysize, and the SSL client certificate chain from an HTTP request header named Proxy-auth-cert. The Proxy-auth-cert value must contain the BASE-64 encoded client certificate chain without the BEGIN CERTIFICATE and END CERTIFICATE boundaries and with \n replaced with % d% a. Only used if authPassthroughEnabled is set to true. Each http-listener subelement can override the proxyHandler setting for itself. |