I have installed Tomcat7 in a PRD machine that has Windows Server 2008 R2 Enterprise and is already running IIS 7.5 with some .NET sites bound on port 80. I need to deploy an e-commerce web application from which I expect a high number of user interactions. The application is written in JSF+Spring, so it seems that the only static content is the images and css.
We have only 1 NIC and 5 IP addresses associated with the machine.
Can anyone tell me if it is a good choice to make the application available outside my machine directly through Tomcat (performance, vulnerability oriented)?
Will I have a benefit or a penalty using Tomcat behind IIS? And why?
Port 80 is busy as a result of IIS so one of the benefits I see from using IIS is that it can parse the incoming HTTP requests and, based on domain name, send the proper traffic to Tomcat.
www.tomcatapp.com is redirected from IIS to ip:8080 where Tomcat is listening too. Using only Tomcat, I would have to ping the application by using the full URL:port binding:
I have found several discussion regard this topic but noone was conclusive.