Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Can anyone tell me, from his experience, if is a good approach leaving Tomcat alone (in PRD) and not "hidden" behind a real web server as Apache or IIS?

The application I am deplying on Tomcat is an e-commerce app with a SSL certificate for security modules (payments). So I want to point on security.

Thanks in advance for any light on this matter.

share|improve this question

closed as not constructive by Zypher Mar 5 '12 at 22:57

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Yes, it's fine. – Zypher Mar 5 '12 at 22:57