Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Tomcat server that listens in 8080(http), 443(https), 7443(https). Note that the connectors for 443 and 7443 use different certificates.
I am interested in using httpd for load balancing.
Is it possible to configure httd so that it simply forwards the requests to Tomcat without needing to install any certificate to httpd itself. I.e. not act as a proxy but as forwarder?
So the SSL end to end is handled by Tomcat.

share|improve this question
up vote 2 down vote accepted

No, Apache isn't capable of being a TCP load balancer; it always expects to handle HTTP requests.

For the behavior you want, take a look at HAProxy instead; it can load balance those TCP connections without being involved in the SSL layer.

share|improve this answer
Is HAProxy comparable to apache http performance?Also does it integrate well with Tomcat, especially if I set up cluster? – Jim Nov 27 '12 at 7:24
@Jim That's a bit of an apples-to-oranges comparison, especially with HAProxy working only at the TCP layer. What kind of integration with Tomcat are you looking for? – Shane Madden Nov 27 '12 at 16:36
I am interested in using Tomcat cluster and haProxy in front. Does it work as well as Apache with Tomcat? – Jim Nov 28 '12 at 9:20
@Jim Sure - since Tomcat's still terminating the SSL, it's got essentially the same options available as connecting directly to Tomcat. – Shane Madden Nov 29 '12 at 5:30

Another option is to have a look at pound

This actually does https offloading as well. Setting up pound is trivial and is also very lightweight and offers good performance.

Cheers, dexter

PS: I thought apache had a load balancing module, but again, apache will not have the performance in load balancing as pound.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.