This is pretty cool explanation .. thanks so much and absolutely my bad this particular thing of port 80 should be asked in tomcat user group ;) But any thoughts on handling of load for tommcat and apache in this case : 2500 hits / min. > singh@xxxxxxxxxxxxxxxxxxx wrote: >> >> This is one thing i have heard from many what's the big deal in opening >> port 80 of app servers? any pointers > > There is no big deal having Tomcat answer directly on port 80. > This topic then would be better posted on the Tomcat users mailing list, > but in a nutshell : > > To be able to open listening server ports < 1024, a process needs to run > as root. Port 80 is < 1024. > > Apache always starts as user root, opens a listening port 80, then > switches to another user-id with lesser permissions to answer requests. > > Tomcat does not do that by itself. To start it listening on port 80, > you have to run it as root, and then it continues to run as root, which > is a bit less comfortable in terms of security. > But, you can use a wrapper (named jsvc), to achieve the same thing as > Apache. > This is already how Tomcat is started by default on some platforms > (Linux Debian and Ubuntu e.g.), but it is available for all. > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx