在AWS Lightsail上将Apache2和Tomcat8与Loadbalancer / OpenSSL结合使用

问题描述

我正在使用带有Apache 2.4和Tomcat 8.0.32的Ubuntu 16.04.6在AWS Lightsail上运行网站。

Apache2站点托管了我使用PHP和Postgresql的大量网站。 Tomcat易于托管Geoserver。

我在AWS LightSail上有一个DNS和负载均衡器。我试图弄清楚如何使用virtualhost使这两个目标无缝融合。 apache2网站可以正常运行，但是tomcats网站却不能。我收到此错误

You don't have permission to access this resource.

Apache/2.4.18 (Ubuntu) Server at tomcat.some-kind-of-site.org Port 80

我正在尝试遵循以下说明，但是设置与我所拥有的有所不同： http://www.creang.com/howtoforge/howto_set_up_tomcat_8_with_apache_2_4_and_mod_jk_on_ubuntu/

我在default-ssl-conf文件上有我的SSL信息

我的tomcat8 server.xml包含：

    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />

    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />

这是我的sites-enabled配置文件：

 <VirtualHost *:80>
     ServerAdmin someone@gmail.com
     ServerName www.some-kind-of-site.org
     RewriteEngine On
     RewriteCond %{HTTP:X-FORWARDED-PORT} !=443
     RewriteRule ^(.*)$ https://www.some-kind-of-site.org$1 [R=301,NE,L]
     DocumentRoot /var/www/html/main-site/
     Alias /multi-site /var/www/html/multi-site
     Alias /file-folder /var/www/html/file-folder
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
 </VirtualHost>
 <VirtualHost *:80>
     ServerName manage.some-kind-of-site.org
     DocumentRoot /var/www/html/main-mgmt/
     RewriteEngine On
     RewriteCond %{HTTP:X-FORWARDED-PORT} !=443
     RewriteRule ^(.*)$ https://manage.some-kind-of-site.org$1 [R=301,L]
     Alias /multi-site /var/www/html/multi-site
     Alias /file-folder /var/www/html/file-folder
     Alias /main-mgmt /var/www/html/main-mgmt
     Alias /main-site /var/www/html/main-site
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
 </VirtualHost>
 <VirtualHost *:80>
     ServerAdmin someone@gmail.com
     ServerName tomcat.some-kind-of-site.org
     DocumentRoot /var/lib/tomcat8/
     Alias /multi-site /var/www/html
     RewriteEngine On
     RewriteCond %{HTTP:X-FORWARDED-PORT} !=443
     RewriteRule ^(.*)$ https://tomcat.some-kind-of-site.org$1 [R=301,L]
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
 </VirtualHost>
 <VirtualHost *:80>
     ServerName geoserver.some-kind-of-site.org
     DocumentRoot /var/lib/tomcat8/webapps/geoserver/
     Alias /multi-site /var/www/html
     RewriteEngine On
     RewriteCond %{HTTP:X-FORWARDED-PORT} !=443
     RewriteRule ^(.*)$ https://geoserver.some-kind-of-site.org$1 [R=301,L]
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
 </VirtualHost>
 <IfModule mod_ssl.c>
     <VirtualHost _default_:443>
         ServerAdmin someone@gmail.com
         ServerName www.some-kind-of-site.org
         DocumentRoot /var/www/html/main-site/
         Alias /multi-site /var/www/html/multi-site
         Alias /file-folder /var/www/html/file-folder
         ErrorLog ${APACHE_LOG_DIR}/main-site_error.log
         CustomLog ${APACHE_LOG_DIR}/main-site_access.log combined
     </VirtualHost>
     <VirtualHost _default_:443>
         ServerAdmin someone@gmail.com
         ServerName manage.some-kind-of-site.org
         DocumentRoot /var/www/html/main-mgmt/
         Alias /multi-site /var/www/html/multi-site
         Alias /file-folder /var/www/html/file-folder
         Alias /main-mgmt /var/www/html/main-mgmt
         Alias /main-site /var/www/html/main-site
         ErrorLog ${APACHE_LOG_DIR}/main-mgmt_error.log
         CustomLog ${APACHE_LOG_DIR}/main-mgmt_access.log combined
     </VirtualHost>
     <VirtualHost *:443>
         ServerAdmin someone@gmail.com
         ServerName tomcat.some-kind-of-site.org
        <Proxy *>
            AddDefaultCharset Off
            Order deny,allow
            Allow from all
            </Proxy>
            ProxyPass / ajp://localhost:8009/
            ProxyPassReverse / ajp://localhost:8009/
         ProxyPreserveHost on
     </VirtualHost>
     <VirtualHost *:443>
         ServerAdmin someone@gmail.com
         ServerName geoserver.some-kind-of-site.org
        <Proxy *>
            AddDefaultCharset Off
            Order deny,allow
            Allow from all
            </Proxy>
            ProxyPass / ajp://localhost:8009/webapps/geoserver/
            ProxyPassReverse / ajp://localhost:8009/webapps/geoserver/
         ProxyPreserveHost on
         </VirtualHost>
     <FilesMatch "\.(cgi|shtml|phtml|PHP)$">
         SSLOptions +StdEnvVars
     </FilesMatch>
 </IfModule>

有人可以帮我吗？请！

解决方法

我想通了……必须，没有人回答。但是花了很多时间，又花了很多时间尝试和错误。

tomcat代理完全不使用443端口...

 <VirtualHost *:80>
     ServerAdmin someguy@gmail.com
     ServerName www.greatexamples.org
     RewriteEngine On
     RewriteCond %{HTTP:X-FORWARDED-PORT} !=443
     RewriteRule ^(.*)$ https://www.greatexamples.org$1 [R=301,NE,L]
     DocumentRoot /var/www/html/mainsite/
     Alias /multi-site /var/www/html/multi-site
        Alias /old_stuff /var/www/html/old_stuff
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
 </VirtualHost>
 <VirtualHost *:80>
     ServerName manage.greatexamples.org
     DocumentRoot /var/www/html/management/
     RewriteEngine On
     RewriteCond %{HTTP:X-FORWARDED-PORT} !=443
     RewriteRule ^(.*)$ https://manage.greatexamples.org$1 [R=301,L]
     Alias /multi-site /var/www/html/multi-site
        Alias /old_stuff /var/www/html/old_stuff
        Alias /management /var/www/html/management
        Alias /mainsite /var/www/html/mainsite
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
 </VirtualHost>
 <VirtualHost *:80>
     ServerAdmin someguy@gmail.com
     ServerName tomcat.greatexamples.org
     DocumentRoot /opt/tomcat/
     ProxyRequests Off
    <Proxy *>
      Order deny,allow
      Allow from all
    </Proxy>
    <Location />
      Order allow,deny
      Allow from all
    </Location>
            ProxyPass / http://localhost:8080/
            ProxyPassReverse / http://tomcat.greatexamples.org:8080/
     ErrorLog ${APACHE_LOG_DIR}/error.log
     CustomLog ${APACHE_LOG_DIR}/access.log combined
 </VirtualHost>
 <IfModule mod_ssl.c>
     <VirtualHost _default_:443>
         ServerAdmin someguy@gmail.com
         ServerName www.greatexamples.org
         DocumentRoot /var/www/html/mainsite/
         Alias /multi-site /var/www/html/multi-site
         Alias /file-folder /var/www/html/old_stuff
         ErrorLog ${APACHE_LOG_DIR}/main-site_error.log
         CustomLog ${APACHE_LOG_DIR}/main-site_access.log combined
     </VirtualHost>
     <VirtualHost _default_:443>
         ServerAdmin someguy@gmail.com
         ServerName manage.greatexamples.org
         DocumentRoot /var/www/html/management/
        Alias /multi-site /var/www/html/multi-site
        Alias /old_stuff /var/www/html/old_stuff
        Alias /management /var/www/html/old_stuff
        Alias /mainsite /var/www/html/mainsite
         ErrorLog ${APACHE_LOG_DIR}/main-mgmt_error.log
         CustomLog ${APACHE_LOG_DIR}/main-mgmt_access.log combined
     </VirtualHost>
 </IfModule>

并将Tomcat的server.xml中的连接器更改为：

<Connector port="8080" protocol="HTTP/1.1"
    connectionTimeout="20000"
    proxyName="tomcat.greatexamples.org"
    proxyPort="80"
    redirectPort="8443" />

ajp geoserver tomcat8 virtualhost