For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gazzo_171274's avatar
Gazzo_171274
Icon for Nimbostratus rankNimbostratus
Sep 23, 2014

Query re. F5 load balancing tomcat (jsp monitoring)

Hi Guys,

I am new to F5's and tomcat load balancing and have tried reading all the docs for my issue.

The architect requested that the health monitor be under root i.e. recv "HTTP/1.1 200"

send "GET /monitor.jsp HTTP/1.1\r\nConnection: Close\r\n\r\n"

On reading all the docs, it looks like this would have to be under the root of the application i.e.

send "GET /appname/monitor.jsp HTTP/1.1\r\nConnection: Close\r\n\r\n"

with the file being deployed in the following location on the tomcat server.

/apps/tom/apps/clientui/tomcat/webapps/appname

I think changing the send request on the F5's to prefix the appname will allow a 200 success but I am being told they don't want the appname being revealed on the f5. Is there a tomcat config change required to ensure the f5 can monitor the jsp from the below without the appname being required in the request.

send "GET /monitor.jsp HTTP/1.1\r\nConnection: Close\r\n\r\n"

I hope that makes sense. Thanks in advance.

1 Reply

  • First and foremost, changing the application base URL in Tomcat is a Tomcat configuration, and dependent on your environment. I'd Google around to see what method works best for you, if that's indeed what you want to do. In lieu of that, I'd perhaps suggest that the URIs used in monitors are not exposed to the client. So using /appname/monitor.jsp in a standard HTTP monitor, or scripted monitor, would reveal absolutely nothing to the user, and would not in any way affect the functionality of the application.